53a8420dbd3fe98e4db1ea8faeade995_JaffaCakes118

General

Target

53a8420dbd3fe98e4db1ea8faeade995_JaffaCakes118
Size

114KB
MD5

53a8420dbd3fe98e4db1ea8faeade995
SHA1

3692811f40075d568c65e09055df93db5da9f36d
SHA256

7aa15d1ccbb4c6e56a78a5f4fe5b2b0f9e017dbe0a4209940ac03700019adbdc
SHA512

04b7a0e34b68319b4fbe5e439972d06350a0bac60b686f97a0bad2b3baacfd563981eefa9297342f9424f89948c406c0d7d7fba660527512b0f11d3125071277
SSDEEP

3072:u3nw05nXa2gVVwAXDSZu/XikEgixoMq5A:knwEnXa2SVwUScPnEgixM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53a8420dbd3fe98e4db1ea8faeade995_JaffaCakes118

Files

53a8420dbd3fe98e4db1ea8faeade995_JaffaCakes118
.exe windows:5 windows x86 arch:x86

47eb729f3f9e1c2babcf2130efab09ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
lstrlenA
GetWindowsDirectoryA
QueryPerformanceCounter
DeleteFileW
GetConsoleOutputCP
SetCurrentDirectoryA
lstrlenW
GetModuleHandleW
GlobalFindAtomW
GetOEMCP
GetCommandLineA
GetACP
GetCurrentProcess
GetCurrentProcessId
IsDebuggerPresent
GetCurrentThreadId
CopyFileA
GetThreadLocale
GetDriveTypeA
GlobalFindAtomA
GetProcessHeap
MulDiv
GetCommandLineW
RemoveDirectoryA
lstrcmpiW
GetModuleHandleA
lstrcmpA
DeleteFileA
GetUserDefaultLangID
GetVersion
lstrcmpiA
GetStartupInfoA
RemoveDirectoryW
GetCurrentThread
VirtualAlloc
VirtualFree

user32

GetDesktopWindow
TranslateMessage
GetParent
GetSystemMetrics
CharNextA

gdi32

CreateSolidBrush
GetPixel
DeleteDC
LineTo
GetDeviceCaps
SelectObject
SetMapMode
CreatePalette
CreatePen
PatBlt
SetTextAlign
RectVisible
GetTextMetricsA
RestoreDC
SelectPalette
SetTextColor
GetObjectA
GetStockObject
SaveDC
CreateFontIndirectA
CreateCompatibleDC
SetStretchBltMode
SetPixel
DeleteObject
GetClipBox

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47eb729f3f9e1c2babcf2130efab09ef

Headers

File Characteristics

Imports

kernel32

user32

gdi32

glu32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 80KB - Virtual size: 80KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 80KB - Virtual size: 80KB

.rsrc
Size: 12KB - Virtual size: 12KB