297db7fd762a47f51d33b57643eac520_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

297db7fd762a47f51d33b57643eac520_JaffaCakes118
Size

111KB
MD5

297db7fd762a47f51d33b57643eac520
SHA1

62bb206229d54b037ccc7d899ce33caeb2070d4a
SHA256

c4732bb7485535440bc5e0b57827304a64fc1c3eacc17ab35cc510e6de37c633
SHA512

7fc1116dbdfd789f580afb26fd9e5dcd067bd75ec3bb7fa545aa8bc2af8dea9bfa9355786ca6bebbb7d2d332f9a4c9b529ded1a505bed82736a639ced22a8a29
SSDEEP

3072:UMg68R7/XL90LsUo/kiFF7tLVub6pKnZEH:UX5/XL9Ispvtpep

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
297db7fd762a47f51d33b57643eac520_JaffaCakes118

Files

297db7fd762a47f51d33b57643eac520_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f029319e5b33e82a9f0eb97ea353ecb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
CreateFontIndirectA
GetTextMetricsA
CreateSolidBrush
GetClipBox
SetTextAlign
GetObjectA
LineTo
SelectPalette
SetTextColor
RectVisible
GetStockObject
GetDeviceCaps
SaveDC
DeleteObject
CreatePalette
CreateCompatibleDC
SetMapMode
DeleteDC

user32

GetSystemMetrics
GetDC
GetDesktopWindow
TranslateMessage
CharNextA
GetParent

kernel32

RemoveDirectoryA
lstrlenW
QueryPerformanceCounter
lstrcmpiA
GetModuleHandleA
lstrcmpiW
GetSystemTime
DeleteFileA
GlobalFindAtomA
GetWindowsDirectoryA
lstrcmpA
CopyFileA
lstrlenA
VirtualAlloc
VirtualFree
RemoveDirectoryW
FindClose

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ