302adcf48b0946550ab3b9c949469346_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

302adcf48b0946550ab3b9c949469346_JaffaCakes118
Size

116KB
MD5

302adcf48b0946550ab3b9c949469346
SHA1

8eb2dd0df6a4ab2f2ff76c520238bcf2ed879fab
SHA256

9d36ae5c78757932a140fd07cafb49126777e0c50d52a6ff5373dca771c755ae
SHA512

ad2be14daab2ddaf2d3f463d26f79ac4b0188b1f1d982764085684c777aa8cb1974beb8e3c0b0523499346ee8f956a0b29ba164a73046d8f1deb4970ace85ba9
SSDEEP

3072:963oYKlC2nItkQ2+Iq9B+Duz+1p7sDolAEc:g4PlC2nZ5Hjsr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
302adcf48b0946550ab3b9c949469346_JaffaCakes118

Files

302adcf48b0946550ab3b9c949469346_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ec7a636a65ca06550983162bb75d10ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetCommandLineA
lstrcmpiA
RemoveDirectoryA
lstrcmpA
lstrlenW
GlobalFindAtomA
CopyFileA
RemoveDirectoryW
GetSystemTime
FindClose
lstrcmpiW
QueryPerformanceCounter
DeleteFileA
GetWindowsDirectoryA
VirtualAlloc
VirtualFree

user32

GetDesktopWindow
CharNextA
GetDC
TranslateMessage
GetParent
GetSystemMetrics

gdi32

SetMapMode
CreateCompatibleDC
SetStretchBltMode
CreateFontIndirectA
GetClipBox
DeleteDC
RectVisible
GetDeviceCaps
DeleteObject
CreateSolidBrush
CreatePalette
GetObjectA
SaveDC
GetPixel
SetTextColor
SelectObject
SetTextAlign
LineTo
RestoreDC
SelectPalette
GetTextMetricsA

glu32

gluNurbsCallback

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ