0f40ad879b94d72da0d3aede74bf9ca9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f40ad879b94d72da0d3aede74bf9ca9_JaffaCakes118
Size

107KB
MD5

0f40ad879b94d72da0d3aede74bf9ca9
SHA1

e62a3a24e43a93490818727b5e3c8c0cbe656502
SHA256

151b7c8b6d289ad9ea8c2f6e30dc0a6df15d5644cfcf558a5b9e0796b3689b18
SHA512

2f85730e01916701e6fbfbbe552e303bcef9d340cca0c7fedf3d91dc6348f48c1b7ac6a85b7f7129bddf961f395b79fd1480179e6fdddf26c85e60d137eef805
SSDEEP

3072:Qt3DydX1n5wVSPUU0RedAYPK8GTRn10sp:S2dF5qSsUEed+n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f40ad879b94d72da0d3aede74bf9ca9_JaffaCakes118

Files

0f40ad879b94d72da0d3aede74bf9ca9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a4648ce5ded2691e500550a5eb25f8f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetClipBox
GetObjectA
RestoreDC
SetStretchBltMode
SetTextAlign
SetTextColor
GetDeviceCaps
GetPixel
DeleteDC
SetMapMode
CreateFontIndirectA
CreateCompatibleDC
RectVisible
CreateSolidBrush
SelectPalette
LineTo
GetStockObject
DeleteObject
SelectObject
SaveDC
GetTextMetricsA
CreatePalette

kernel32

lstrlenW
RemoveDirectoryA
lstrcmpA
CopyFileA
GetCommandLineA
GlobalFindAtomA
RemoveDirectoryW
FindClose
GetSystemTime
lstrcmpiW
GetModuleHandleA
GetWindowsDirectoryA
lstrlenA
VirtualAlloc
QueryPerformanceCounter
VirtualFree
DeleteFileA
lstrcmpiA

user32

CharNextA
GetSystemMetrics
GetDesktopWindow
GetDC
TranslateMessage
GetParent

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ