53573296a65815782c019d86a74e9d26_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

53573296a65815782c019d86a74e9d26_JaffaCakes118
Size

110KB
MD5

53573296a65815782c019d86a74e9d26
SHA1

b842816749a312c7a98dc2321d0c56e50c8d2b4c
SHA256

7aea2162a34f7ee7af3cd8c84e3b521ee1fa79a93502f6dca01d3227f057a8ff
SHA512

43b093fadca60370ac34b39e653f4436a1ac9926701275fbd1377f9355f63eadb9e63f4966ffa272987072d3e252051c58c34d3bf7b97071c72b28ca6dcf8c91
SSDEEP

3072:kuvri230JMfXJaWicXuSyOLTQEYDzcInQtY:kl230oZa7c5BYDzcIQ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53573296a65815782c019d86a74e9d26_JaffaCakes118

Files

53573296a65815782c019d86a74e9d26_JaffaCakes118
.exe windows:5 windows x86 arch:x86

22f052d41e2ea3e317f112bfb5383f4b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
GetDesktopWindow
TranslateMessage
GetParent
GetSystemMetrics
GetDC

kernel32

GetCurrentThreadId
GetCommandLineA
GetProcessHeap
lstrcmpA
DeleteFileA
GetCurrentProcessId
GetUserDefaultLangID
lstrlenW
GetModuleHandleA
GlobalFindAtomA
RemoveDirectoryA
GetOEMCP
GetCurrentThread
MulDiv
GetThreadLocale
IsDebuggerPresent
GetWindowsDirectoryA
CopyFileA
GetModuleHandleW
QueryPerformanceCounter
GetDriveTypeA
lstrcmpiA
GetVersion
GetTickCount
DeleteFileW
GetCurrentProcess
VirtualAlloc
GetConsoleOutputCP
VirtualFree
lstrcmpiW
GetACP
GlobalFindAtomW
SetCurrentDirectoryA
lstrlenA

gdi32

SelectPalette
SetTextAlign
RestoreDC
LineTo
PatBlt
GetObjectA
GetClipBox
CreateFontIndirectA
SetMapMode
GetPixel
CreateCompatibleDC
SetTextColor
RectVisible
SaveDC
GetTextMetricsA
CreatePen
CreatePalette
CreateSolidBrush
GetStockObject
GetDeviceCaps
SelectObject
DeleteDC
DeleteObject

glu32

gluNurbsCallback

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sbrys Kx
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Ftsgykyu
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

22f052d41e2ea3e317f112bfb5383f4b

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 10KB - Virtual size: 9KB

Sbrys Kx Size: 512B - Virtual size: 4KB

.rdata Size: 25KB - Virtual size: 25KB

Ftsgykyu Size: 512B - Virtual size: 4KB

.data Size: 100KB - Virtual size: 99KB

.rsrc Size: 29KB - Virtual size: 49KB

.text
Size: 10KB - Virtual size: 9KB

Sbrys Kx
Size: 512B - Virtual size: 4KB

.rdata
Size: 25KB - Virtual size: 25KB

Ftsgykyu
Size: 512B - Virtual size: 4KB

.data
Size: 100KB - Virtual size: 99KB

.rsrc
Size: 29KB - Virtual size: 49KB