391c2a875c20bf947e6d914c38dc588a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

391c2a875c20bf947e6d914c38dc588a_JaffaCakes118
Size

150KB
MD5

391c2a875c20bf947e6d914c38dc588a
SHA1

60b2fa1f7879778514c330e1ae1aa4a1acd6ad06
SHA256

f05cd6bd21114ee059ae974411ca8fb8010cbc8cded9d79cad4d80f84948d82c
SHA512

83fd46c11d060d6058d9e60c86fb353fbed61c408c0af4c74731713d3dbbfce5aa2d623b20fe43d1bba45995fb304a7833216f5f841d128f793065b48bb6d3f1
SSDEEP

1536:n/K36kPdYy7JK91sw/fioehvHyd0j0Hqtwl0gRUZX9EROlY3P8Jtsl4kp5MEHbe:m6w7Js1sw3ehPhwl0zMOgqtOp5Moy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
391c2a875c20bf947e6d914c38dc588a_JaffaCakes118

Files

391c2a875c20bf947e6d914c38dc588a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28bf3b938e4afa1833e1eebd738369cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
GetParent
CharNextA

gdi32

CreateSolidBrush
PatBlt
SetStretchBltMode
Rectangle
SetTextColor
SelectPalette
DeleteDC
CreateCompatibleDC
RectVisible

kernel32

GetWindowsDirectoryA
DeleteFileW
lstrlenW
GetUserDefaultLangID
GetModuleHandleA
VirtualAlloc
DeleteFileA
GetCurrentThreadId
GetCommandLineA
VirtualFree

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 943B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Lnlyxp X
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ