2c57c634f16028efadf18148e05fa92b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c57c634f16028efadf18148e05fa92b_JaffaCakes118
Size

103KB
MD5

2c57c634f16028efadf18148e05fa92b
SHA1

83337136f022cdc24a242a449036466139dd1f48
SHA256

ec013aa2fce95f53778fa626f81b41a1e4fa8b455848693b30c251ed06c31ff8
SHA512

47f1a9279052b06f11463dc19748427e8a4d16eb392e32f9e534782307f8a8780053a26e3fb02f9cafc491da5d17b53e5b720c161c0f331c833aedaf7727234c
SSDEEP

1536:kpwPlNEFm3mXYEPF87VgpcpG76zOIFAzFhIfSxtGFj/deLK5i6DG4lNdDJ2XpN:EYNEmWIJBpG767Oz7IfSaFj/TNdDJWX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c57c634f16028efadf18148e05fa92b_JaffaCakes118

Files

2c57c634f16028efadf18148e05fa92b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

37a9df5d8a21d954c53dbcbd3842ddf1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteDC
SelectPalette
GetObjectA
SetTextAlign
GetClipBox
DeleteObject
CreateCompatibleDC
CreateFontIndirectA
GetDeviceCaps
CreatePalette
LineTo
SetStretchBltMode
RectVisible
SelectObject
GetStockObject
SetMapMode
GetTextMetricsA
CreateSolidBrush
SaveDC

kernel32

DeleteFileA
lstrcmpiA
QueryPerformanceCounter
lstrlenW
lstrlenA
GlobalFindAtomA
RemoveDirectoryW
GetSystemTime
FindClose
lstrcmpiW
lstrcmpA
GetWindowsDirectoryA
RemoveDirectoryA
VirtualAlloc
CopyFileA
VirtualFree
GetModuleHandleA

user32

GetDC
TranslateMessage
GetParent
GetSystemMetrics
CharNextA
GetDesktopWindow

glu32

gluNurbsCallback

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ