53317af163057e4bf82f1c230c704e0e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

53317af163057e4bf82f1c230c704e0e_JaffaCakes118
Size

98KB
MD5

53317af163057e4bf82f1c230c704e0e
SHA1

57432c3cbd113908d949e617e6b35601e1926059
SHA256

3a1755c931099a0bd357436a52be2a86fe197ec8996accb54e8ec7de05d6839f
SHA512

e63a07580e55bc762fc39e1b44e4855f2ff622a8d99848a19b48a85f9a65000d21876fab95e149aa222ba8fe1b9a778a3c412c558de7c66dae1875bb7c6da69e
SSDEEP

1536:KRE+mYnqTva2Un6JQ+8E8iYKGvPt2u7z+ZFZMAHhXhh7CZQQ:gmYCa2YBcYKA17SEAHrhM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53317af163057e4bf82f1c230c704e0e_JaffaCakes118

Files

53317af163057e4bf82f1c230c704e0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1758794aae2dc9bdabc89d64eb228b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glViewport
glRotated
glGetIntegerv
glRasterPos3d
glAreTexturesResident
glClipPlane
glCopyTexImage1D

gdi32

GetBkColor
CopyMetaFileW
ChoosePixelFormat

shlwapi

StrIsIntlEqualA
StrCSpnIA
StrRChrIW
StrRStrIA
PathQuoteSpacesW
StrToIntA
ChrCmpIA
SHRegQueryUSValueA
PathCompactPathExA
PathParseIconLocationA
PathFindOnPathW
PathCommonPrefixW
PathAddBackslashW
StrCmpNA

kernel32

VirtualQueryEx
GlobalLock
WaitForMultipleObjects
VirtualProtect
GetOEMCP
GetStringTypeA
LeaveCriticalSection
HeapAlloc
GetProcessHeap
GetCPInfoExA
ResetEvent
LocalReAlloc
HeapCompact
DeleteCriticalSection
SetLocaleInfoA
GetModuleHandleA
GetProcAddress
GetTickCount
GetCurrentProcess
GetModuleFileNameA
VirtualAlloc
OpenEventA
TlsGetValue
ReleaseMutex
PulseEvent
GetHandleInformation
ResumeThread
TlsSetValue
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
EnterCriticalSection
HeapReAlloc
GetLastError
SetFilePointer
WideCharToMultiByte
GetStringTypeW
SetStdHandle
GetFileType
WriteFile
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetCurrentThreadId
TlsAlloc
SetLastError
RtlUnwind
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
CloseHandle

secur32

DecryptMessage
DeleteSecurityContext
CompleteAuthToken
FreeCredentialsHandle
EncryptMessage
MakeSignature
ApplyControlToken
VerifySignature

uxtheme

GetThemeSysString

wsnmp32

ord200

cryptui

CryptUIWizDigitalSign
CryptUIWizImport
CryptUIDlgViewContext
CryptUIWizExport

setupapi

SetupGetInfFileListW
SetupDiUnremoveDevice
SetupOpenAppendInfFileA
SetupQueryFileLogW
SetupGetLineByIndexW
SetupScanFileQueueW
SetupDiEnumDriverInfoW
SetupIterateCabinetA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1758794aae2dc9bdabc89d64eb228b8

Headers

File Characteristics

Imports

opengl32

gdi32

shlwapi

kernel32

secur32

uxtheme

wsnmp32

cryptui

setupapi

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 15KB

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 15KB

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 4KB - Virtual size: 4KB