1abe20a86d3eb829acc4bb2419ad2734_JaffaCakes118 | Triage

Sharing

General

Target

1abe20a86d3eb829acc4bb2419ad2734_JaffaCakes118
Size

149KB
MD5

1abe20a86d3eb829acc4bb2419ad2734
SHA1

2183c01dd6e8437e3b9af05d5174d0fd38ee345c
SHA256

6757d18c68823aa1c5293f9b14d8b683b7ade4e0f8d02e0485b96f4f299bc71b
SHA512

e5a1784841c486037f9b290629f0c99947d8dac9dd32a312d84a6dfb59c26c102c55937ec916c8eafa3f1ab5a9a1befae485667d5e86ec78a5fbcab578562eb5
SSDEEP

3072:CP5jRtEMJ/Mnz1oeBTpitgDjeKfFFqK86t6:b5yeXn6KfFFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1abe20a86d3eb829acc4bb2419ad2734_JaffaCakes118

Files

1abe20a86d3eb829acc4bb2419ad2734_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b35e95f9fee93ba1b620da55099545b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
GetStockObject
CreatePalette
CreateSolidBrush
GetTextMetricsA
SelectObject

user32

ShowWindow
GetDC
GetSystemMetrics
GetParent

kernel32

QueryPerformanceCounter
VirtualAlloc
GetModuleHandleW
SetLastError
GetStartupInfoA
GetConsoleOutputCP
VirtualFree
GetThreadLocale
GetCurrentProcessId
GetUserDefaultLangID
SetCurrentDirectoryA
lstrcmpA

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 842B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Exrui. K
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ