179cb852d482fa41fc2fae850d9be1f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

179cb852d482fa41fc2fae850d9be1f1_JaffaCakes118
Size

148KB
MD5

179cb852d482fa41fc2fae850d9be1f1
SHA1

fa91c90fa5d1980cb290c536dc350016dd9a92ab
SHA256

7628805fd289432e5bb2f255a9e148663e94c0d6cf0bd8e2666b168fb67dd05a
SHA512

06a0a8bdc7692ac0916e9002f8457e41801045e6f01330424a334a248e18faff3ebdd2110b3a68e3be9069054a6ca052824a38df9018c7526e0a84a015f3b5a7
SSDEEP

3072:tAkF6wfT70aavlQZObCHPZQFaD3f68mR:VTYvqXvKi3xQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
179cb852d482fa41fc2fae850d9be1f1_JaffaCakes118

Files

179cb852d482fa41fc2fae850d9be1f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f049e9f602313780e9b0635a54872da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
DispatchMessageA
CharNextA
ShowWindow
GetParent
GetSystemMetrics

kernel32

GetACP
GetCurrentThreadId
GlobalFindAtomA
GetTickCount
GetOEMCP
lstrcmpiW
GetCommandLineW
DeleteFileA
lstrlenW
VirtualAlloc
IsDebuggerPresent
VirtualFree

gdi32

DeleteDC
SetTextColor
LineTo
CreateCompatibleDC
Rectangle
GetPixel
SetBkMode
CreateSolidBrush
GetClipBox

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Wxrmjt I
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ