290e5ec7931fcec83d0d3f64a79840ac_JaffaCakes118 | Triage

Sharing

General

Target

290e5ec7931fcec83d0d3f64a79840ac_JaffaCakes118
Size

111KB
MD5

290e5ec7931fcec83d0d3f64a79840ac
SHA1

5ad9b927f8e25ed085a86ff2706e9812af5098ef
SHA256

ca608b8ed5514665d46d153a0036ee24d892207da99b4319c83eabaa7a6bddbe
SHA512

401d13133e4b84406a910b7ee3eef214e1df43740d0a136e5e3441acbcbc4903030c53870e78c8a291b38aec2eef8b0d3f8a7a7bd3b6851216ed4bf2072fc5aa
SSDEEP

3072:4FD08CBKqqnkGlK0DukFvVn1kgTHfKZF:47CBKqwkGlK0qA91Zu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
290e5ec7931fcec83d0d3f64a79840ac_JaffaCakes118

Files

290e5ec7931fcec83d0d3f64a79840ac_JaffaCakes118
.exe windows:5 windows x86 arch:x86

49c89b0f36a49a0c1440a4277d9ff886

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
GetSystemMetrics
GetParent
GetDC
CharNextA
GetDesktopWindow

kernel32

lstrcmpA
GetSystemTime
lstrcmpiA
CopyFileA
lstrlenW
RemoveDirectoryW
RemoveDirectoryA
FindClose
QueryPerformanceCounter
lstrcmpiW
GlobalFindAtomA
GetModuleHandleA
GetCommandLineA
VirtualAlloc
GetWindowsDirectoryA
VirtualFree
lstrlenA

gdi32

SetMapMode
SelectPalette
RestoreDC
SetTextColor
CreateCompatibleDC
GetStockObject
CreateSolidBrush
LineTo
GetObjectA
SetTextAlign
GetClipBox
GetDeviceCaps
SelectObject
GetTextMetricsA
SetStretchBltMode
SaveDC
DeleteObject
GetPixel
RectVisible

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ