430d0884cc9ba06820361949facfe912_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

430d0884cc9ba06820361949facfe912_JaffaCakes118
Size

97KB
MD5

430d0884cc9ba06820361949facfe912
SHA1

2f8ae21356638bd8eaf27a17e0ec09d4cda0632e
SHA256

076b1e42f37138142e3fa681d7d87fd31c0ed6c95cd086cc0f42d64b2ff47b27
SHA512

1220de05d42fe13017ba2f24788756cd254f5be6909282559c98a2b0d522eb11411803338e3f5e46740b38aa3cbf731554198a366edec5403d25e4b8f1da136c
SSDEEP

3072:WNJNr5M5sFKl6h2dMSeHuivVSE+GCHdozlWxl8LL4:CJx51AlRddeHuM+GCH24

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
430d0884cc9ba06820361949facfe912_JaffaCakes118

Files

430d0884cc9ba06820361949facfe912_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1128d61d35269cd5c7d39bb21eef7430

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SelectObject
CreatePalette
PatBlt
SetTextAlign
GetStockObject
SelectPalette
SetTextColor
MoveToEx
SetBkMode
GetObjectA
CreateFontIndirectA

user32

ShowWindow
GetParent
TranslateMessage
DispatchMessageA
GetSystemMetrics

kernel32

GetVersion
SetLastError
VirtualAlloc
GetCommandLineA
IsDebuggerPresent
GetLastError
VirtualFree
GetCurrentProcess
GetProcessHeap

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Xycal Eb
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ