4ba0ca8b9ded2eaa92705cd2afa0a224_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ba0ca8b9ded2eaa92705cd2afa0a224_JaffaCakes118
Size

97KB
MD5

4ba0ca8b9ded2eaa92705cd2afa0a224
SHA1

5a9e7097c71e332b1faea9cfe32c668b5538619f
SHA256

c39543f3a3a33b729947654fe5b1d7daa7b9c12d497db6751734eb6567865170
SHA512

1a10e89e7f1a07ad9089c65f52a1abc8f984d17221b9161168e0b8327f7f17b24d6df5db29bddf170b13f504a8be18a5fc4c9e050997ce78f608d75cca611c34
SSDEEP

1536:5OShi6lfDWthoVT1keVjfbC1kpGH2/PYodqc3d1Rh0l74KdXe8MLK06Of5N:5OGWthoVTO0mk0W/PYovXY04u9K06kH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ba0ca8b9ded2eaa92705cd2afa0a224_JaffaCakes118

Files

4ba0ca8b9ded2eaa92705cd2afa0a224_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7e2872c333e3f22c26373699ebb53115

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
DispatchMessageA
GetDC
CharNextA

gdi32

MoveToEx
SelectObject
CreatePen
GetPixel
GetObjectA
DeleteDC
GetClipBox
Rectangle
RectVisible

kernel32

lstrlenA
GlobalFindAtomA
GetProcessHeap
CopyFileA
GetModuleHandleW
SetLastError
MulDiv
VirtualAlloc
QueryPerformanceCounter
VirtualFree

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 950B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Kxpd, Tw
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ