0d701f181c2d3d704cd4e59202666aa6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d701f181c2d3d704cd4e59202666aa6_JaffaCakes118
Size

181KB
MD5

0d701f181c2d3d704cd4e59202666aa6
SHA1

0646a082ddb0872c781e068d50b9414af1b500c9
SHA256

a9e91f04ab51cc9504bf3ac6a977021667fca7b875fc7dd7347860ccbd53175a
SHA512

cd96f37567d8ce5addfe32913d7307e867c6fa96fdfd2d7b2504a143760325ca1aa34414befc26cb93c8616bafba6b4c07a9dfece98012ef220e92437cdf3243
SSDEEP

3072:FTO4X0sMJF8qGyQOCgrbqV2X28bJLFiNgLUJF:tDX09FJQOCpN8VLcV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d701f181c2d3d704cd4e59202666aa6_JaffaCakes118

Files

0d701f181c2d3d704cd4e59202666aa6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb787aec08d77f86f80d0c37d3fae742

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
TranslateMessage
GetSystemMetrics
CharNextA
GetDC
GetParent

gdi32

GetClipBox
SetMapMode
SetTextAlign
LineTo
SetTextColor
GetDeviceCaps
GetObjectA
SelectObject
RestoreDC
SetStretchBltMode
GetTextMetricsA
DeleteObject
CreateSolidBrush
CreateFontIndirectA
SelectPalette
RectVisible
CreateCompatibleDC
GetPixel
CreatePalette
SaveDC
GetStockObject
DeleteDC

kernel32

CopyFileA
QueryPerformanceCounter
VirtualAlloc
lstrlenW
RemoveDirectoryA
GetCommandLineA
GetWindowsDirectoryA
GetModuleHandleA
DeleteFileA
lstrlenA
VirtualFree
lstrcmpiW
RemoveDirectoryW
FindClose
lstrcmpiA
GetSystemTime
lstrcmpA

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ