0f0832e5d2576f7d02b415bf7f5d1e63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f0832e5d2576f7d02b415bf7f5d1e63_JaffaCakes118
Size

117KB
MD5

0f0832e5d2576f7d02b415bf7f5d1e63
SHA1

0038a785c91165b96666adf80408d4e531f2cbcd
SHA256

93755fa038d396bc74c9eca65c87dba9e2586412ebf4f77d25c7c5927dc15503
SHA512

8873933c7a30858798d57b87189bbcf940f0dbc9fd27e61a133a9a75ef9bbcc133e9b97903730d8b609f558853e7ee2540039f9307ea258f67741d0f84311c5f
SSDEEP

1536:yphiZsUV4kLxCL9V81vj9UGA6/dPJDXgv2i5GfIZC3fL5mkEPTe/D8EeJnZ3Q0iZ:EQ54MxC8LAqRXCtlwCe/Dy+SX8p/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f0832e5d2576f7d02b415bf7f5d1e63_JaffaCakes118

Files

0f0832e5d2576f7d02b415bf7f5d1e63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

311a7ffcd28703494fd83b51e25b3d55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetMapMode
DeleteObject
CreateFontIndirectA
GetDeviceCaps
GetTextMetricsA
DeleteDC
CreatePalette
SaveDC
LineTo
GetStockObject
CreateCompatibleDC
RestoreDC
SetTextColor
SelectObject
GetObjectA
GetClipBox
CreateSolidBrush
SetTextAlign
RectVisible
SelectPalette
GetPixel
SetStretchBltMode

user32

TranslateMessage
GetDC
GetSystemMetrics
CharNextA
GetParent
GetDesktopWindow

kernel32

lstrcmpiW
DeleteFileA
lstrcmpA
lstrlenA
GetModuleHandleA
GetWindowsDirectoryA
GetSystemTime
GlobalFindAtomA
VirtualAlloc
RemoveDirectoryA
GetCommandLineA
VirtualFree
RemoveDirectoryW
FindClose
CopyFileA
lstrcmpiA
lstrlenW
QueryPerformanceCounter

glu32

gluNurbsCallback

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ