4c79000069ba3f5d6961263c02cd5aba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c79000069ba3f5d6961263c02cd5aba_JaffaCakes118
Size

110KB
MD5

4c79000069ba3f5d6961263c02cd5aba
SHA1

05db54f2691f913c1877876634dc97c1e5873eea
SHA256

b3e004767dacd211374b8f9cb179f218da4eb044d1ac148622dd71095da511eb
SHA512

772924e37ce6b2503d8f3eed3465b9a980d54bf056ebf13a980d3c14e7d6191de37065a933574728d39b326079c4e7f4d3d842919badfd0cae469e0dd8d084ed
SSDEEP

1536:Yr5ojjQZYbACrA2IioSzhaI27vJASLzEgZfasUj/t77H26GPaCHVX0QEy:YmjMrIAJIe5zEgIsmtuHVX0QE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c79000069ba3f5d6961263c02cd5aba_JaffaCakes118

Files

4c79000069ba3f5d6961263c02cd5aba_JaffaCakes118
.exe windows:5 windows x86 arch:x86

69718186166b49f5e498a3f7003b0382

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
GetDC
GetDesktopWindow
GetParent
TranslateMessage
CharNextA

gdi32

CreateSolidBrush
SelectObject
CreateCompatibleDC
GetStockObject
SetTextAlign
DeleteDC
CreateFontIndirectA
GetClipBox
SetMapMode
SaveDC
SetStretchBltMode
SetTextColor
GetTextMetricsA
GetDeviceCaps
GetObjectA
SelectPalette
RectVisible
RestoreDC
LineTo

kernel32

CopyFileA
QueryPerformanceCounter
RemoveDirectoryA
GetModuleHandleA
GetCommandLineA
GetSystemTime
lstrlenA
lstrcmpiA
lstrcmpA
GetWindowsDirectoryA
lstrlenW
DeleteFileA
GlobalFindAtomA
RemoveDirectoryW
FindClose
lstrcmpiW
VirtualAlloc
VirtualFree

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ