331b763060384a59596e07bf9f290206_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

331b763060384a59596e07bf9f290206_JaffaCakes118
Size

151KB
MD5

331b763060384a59596e07bf9f290206
SHA1

68626e014797bef74351596b5909a687d5a1aa22
SHA256

6822c66e49a62c98c439cc6a063ee7be1d47fa38d53f91111f29a60a98f16d4d
SHA512

4a9e612865aa5ced06cd6292a333c0b81092d5916378a7abd1573a2d94f3403bff2c30cfd400e6f142a44c1158b7fe504cc32e5be2f259697c8a74be5ac74c1c
SSDEEP

3072:P8lP5YKLAajFtZ/Uj3mEPWzvFAoJN7K+Be+:P8NLbDZ/ULmI6J9Km

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
331b763060384a59596e07bf9f290206_JaffaCakes118

Files

331b763060384a59596e07bf9f290206_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09eb9b4fe5ffa7e83ba6f4077692c94f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
TranslateMessage
GetParent
GetDesktopWindow
ShowWindow
GetDC

kernel32

SetLastError
GetDriveTypeA
GetUserDefaultLangID
GetStartupInfoA
GetACP
IsDebuggerPresent
GlobalFindAtomA
lstrlenW
QueryPerformanceCounter
GetVersion
GetProcessHeap
lstrcmpA
GetTickCount
VirtualAlloc
DeleteFileW
GetWindowsDirectoryA
SetCurrentDirectoryA
VirtualFree

gdi32

PatBlt
SetMapMode
GetClipBox
CreatePen
RectVisible

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 1019B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Ehjvlqri
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ