240be006a37938deb6eb6082ec26843e_JaffaCakes118 | Triage

Sharing

General

Target

240be006a37938deb6eb6082ec26843e_JaffaCakes118
Size

110KB
MD5

240be006a37938deb6eb6082ec26843e
SHA1

7ef32437f9e0a8117f4a63fead233ef4128b3836
SHA256

ed2d6c836151c1328e92791a1199229121cbeb71436bc7dc7de040f79d9826f3
SHA512

e4ab9c732c2f5be02b4270dd425fe477b2ea9db41659b224142be249ce64704bf5b6e2503431b7d1bdd5b719733143669bc756f018960e2cba76e8e5b951c033
SSDEEP

3072:C02zx9dPYhyufpU4af4jIWvwHynP9RRnEh3Ys09m+OJv6:C3DfDmoEVPEh6Sv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
240be006a37938deb6eb6082ec26843e_JaffaCakes118

Files

240be006a37938deb6eb6082ec26843e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa8e691c1e2cf85a2c8ff69cc7ce761a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
TranslateMessage
GetDC
CharNextA
GetSystemMetrics
GetParent

kernel32

QueryPerformanceCounter
DeleteFileA
GetCommandLineA
RemoveDirectoryA
lstrlenW
CopyFileA
lstrcmpiW
GetModuleHandleA
GetWindowsDirectoryA
RemoveDirectoryW
FindClose
GetSystemTime
GlobalFindAtomA
lstrlenA
lstrcmpiA
VirtualAlloc
VirtualFree

gdi32

LineTo
CreatePalette
RestoreDC
SelectObject
SetStretchBltMode
SetTextAlign
SelectPalette
SetMapMode
GetClipBox
SaveDC
SetTextColor
CreateFontIndirectA
GetStockObject
GetDeviceCaps
GetTextMetricsA
DeleteDC
CreateCompatibleDC
GetObjectA
CreateSolidBrush
DeleteObject

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ