237bf654b5244a97cff4a76807e34ac0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

237bf654b5244a97cff4a76807e34ac0_JaffaCakes118
Size

106KB
MD5

237bf654b5244a97cff4a76807e34ac0
SHA1

a67d0d94f68244190b61f01f1def752e640f7284
SHA256

2e952eed187d89192f186fffcf43a96267e79a7c43fd40d3883745bcbaaae90b
SHA512

e94ad22e2906f2b9dadeae00aeb6a162a6eadb0142d8b79d94ec1bc49ea56f0187fd7bb1649e044aceb2624bdb1ee9a18aec45c07518c608fa9fa592476aba5f
SSDEEP

1536:woBxN2LlSl8m8BtCCRyhTza07RTlgjQUaN3i6UZ48ySTvkr8n:wozN2xQRSyFm07RhuQULySTvko

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
237bf654b5244a97cff4a76807e34ac0_JaffaCakes118

Files

237bf654b5244a97cff4a76807e34ac0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3cc2799eb0ce55650614fc894b01d60b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
GetCommandLineA
DeleteFileA
GetModuleHandleA
GetWindowsDirectoryA
QueryPerformanceCounter
lstrcmpiW
RemoveDirectoryW
RemoveDirectoryA
FindClose
lstrlenW
lstrcmpiA
lstrcmpA
lstrlenA
CopyFileA
GetSystemTime
VirtualAlloc
VirtualFree

user32

GetSystemMetrics
GetParent
GetDesktopWindow
GetDC
TranslateMessage
CharNextA

gdi32

SaveDC
GetDeviceCaps
LineTo
SetTextAlign
DeleteDC
SetTextColor
DeleteObject
GetClipBox
GetObjectA
SetMapMode
CreateCompatibleDC
GetStockObject
RestoreDC
SelectObject
SelectPalette
SetStretchBltMode
CreateSolidBrush
RectVisible
GetPixel
CreatePalette
GetTextMetricsA
CreateFontIndirectA

glu32

gluNurbsCallback

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ