43a67b7543c7ed575ca20d68c7b66bc9_JaffaCakes118 | Triage

Sharing

General

Target

43a67b7543c7ed575ca20d68c7b66bc9_JaffaCakes118
Size

153KB
MD5

43a67b7543c7ed575ca20d68c7b66bc9
SHA1

5dc5427a82f1b672b4d6a7a020fa539a18fbc008
SHA256

36d47a573253b81db751fc9898e7c1049c4932a9e4a842c49003b5ee88cadb94
SHA512

06ce742e854ba08908e6b1317ff0af9e41f49ca99b77fa934a1dd3e0311e5fcae859ba2ab7f6facb4b734f2fca70c7cfe7b13273c3337e5d4685734c0271f0ee
SSDEEP

3072:F0wryu7TnzV9AdtuQOcFRZJeCMusQi7z:xFl9ytuQOKJQusQI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43a67b7543c7ed575ca20d68c7b66bc9_JaffaCakes118

Files

43a67b7543c7ed575ca20d68c7b66bc9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4d0b8cd52dd57aff6fdf15ce4bb6f5c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
DispatchMessageA
GetParent
ShowWindow
CharNextA
GetSystemMetrics

kernel32

SetLastError
GetTickCount
SetCurrentDirectoryA
GetCurrentProcess
GetProcessHeap
VirtualAlloc
GlobalFindAtomA
GetConsoleOutputCP
VirtualFree

gdi32

SaveDC
SetBkMode
GetTextMetricsA
CreateSolidBrush
DeleteDC
RestoreDC
SetMapMode

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 841B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Rglbbapa
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ