1c80fa57e5383aefd23669cf814146ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c80fa57e5383aefd23669cf814146ee_JaffaCakes118
Size

113KB
MD5

1c80fa57e5383aefd23669cf814146ee
SHA1

0d423c944d48c2f8907fdf9980dcddbc78d588a6
SHA256

469e2dcb0aaba01e5ee3c32ce59e80650c8b9a9cc2f1a9be232f52036468770a
SHA512

81871c324fd751e7601e685edf117062d4af4d00c2fbb2fc6e3c03f594272631e83fa25590c8a37b7e2caafd71d063c16479a107fa06d5fa1dd3e967fd6354cb
SSDEEP

3072:/To5Eh0otQb/iG543hA9Hw8nvkVTfc7iH:rMqdd3h83vkaW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c80fa57e5383aefd23669cf814146ee_JaffaCakes118

Files

1c80fa57e5383aefd23669cf814146ee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0fc7f74ed7f53ab36c09728abf3616e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetCommandLineA
lstrcmpA
lstrcmpiW
RemoveDirectoryA
lstrlenW
GlobalFindAtomA
QueryPerformanceCounter
RemoveDirectoryW
lstrcmpiA
FindClose
lstrlenA
CopyFileA
DeleteFileA
GetWindowsDirectoryA
VirtualAlloc
VirtualFree

gdi32

SetTextColor
CreateSolidBrush
SelectPalette
CreateFontIndirectA
SaveDC
GetObjectA
CreateCompatibleDC
SetTextAlign
GetClipBox
RectVisible
SelectObject
DeleteDC
LineTo
DeleteObject
SetMapMode
RestoreDC
GetTextMetricsA
GetDeviceCaps
GetStockObject

user32

TranslateMessage
GetSystemMetrics
GetDC
GetDesktopWindow
GetParent
CharNextA

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ