252c12e2334c66728fa350f7476ff453_JaffaCakes118 | Triage

Sharing

General

Target

252c12e2334c66728fa350f7476ff453_JaffaCakes118
Size

115KB
MD5

252c12e2334c66728fa350f7476ff453
SHA1

be04170eb3e4224408eff5203f4cf5ac1314422e
SHA256

c4bb089f8c9af9ff7d403b61cac75010b24fd977d714c624884de55cff78d691
SHA512

5be6a2e61cfa6774f3c13ed2e592e8e8c9f7ea4f3231e221b4ec5c55e0ed3a7aa9462356064b8c4566b1a6ed1b9b2bcb313e9a8b961775ea2524fd2e525708c4
SSDEEP

3072:ypgyUV0L++GFl6EDnp+YqYDYvu4yWKm/:J0cFGYuT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
252c12e2334c66728fa350f7476ff453_JaffaCakes118

Files

252c12e2334c66728fa350f7476ff453_JaffaCakes118
.exe windows:5 windows x86 arch:x86

62988f4f577c01568d6bb2425d54ed2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

LineTo
CreatePalette
GetClipBox
DeleteObject
SetStretchBltMode
RectVisible
GetStockObject
SetTextAlign
CreateFontIndirectA
RestoreDC
GetPixel
GetObjectA
GetTextMetricsA
SaveDC
DeleteDC
GetDeviceCaps
CreateCompatibleDC
CreateSolidBrush
SetTextColor
SetMapMode
SelectPalette

kernel32

CopyFileA
lstrlenW
lstrcmpA
lstrcmpiA
lstrcmpiW
GetCommandLineA
lstrlenA
GetModuleHandleA
GetSystemTime
RemoveDirectoryA
DeleteFileA
RemoveDirectoryW
QueryPerformanceCounter
FindClose
GlobalFindAtomA
GetWindowsDirectoryA
VirtualAlloc
VirtualFree

user32

GetParent
GetDesktopWindow
GetSystemMetrics
GetDC
TranslateMessage
CharNextA

glu32

gluNurbsCallback

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ