60f1c9860a5d093e1b924f5aea9a3857_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60f1c9860a5d093e1b924f5aea9a3857_JaffaCakes118
Size

105KB
MD5

60f1c9860a5d093e1b924f5aea9a3857
SHA1

e8a665324a0bae6ddc9adfdf7142a964e0ce7dda
SHA256

15d91eedc4e2465d52560898527f6aec0fe4d161c00c87a72d2f4aceb8902a74
SHA512

de0a3854dc18437f2095a6a2c0c0a852e090ad175bec87d4b3b727908518f1625ab790db7e5417ae75efc346f24fffa58d56c4c6860dd088bd6c8c8d0f1b30b3
SSDEEP

1536:6h149mtLm+eJswZN5Z2Es9OzQuLphG/JqSt3i6nEu6pH+Kw:W4Q/K7jzlLph1fpH+Kw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60f1c9860a5d093e1b924f5aea9a3857_JaffaCakes118

Files

60f1c9860a5d093e1b924f5aea9a3857_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cebda015654f0457d2243c5f59502fba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
TranslateMessage
GetParent
GetSystemMetrics
GetDC
CharNextA

gdi32

SelectPalette
CreatePalette
SetTextColor
GetClipBox
GetObjectA
CreateSolidBrush
GetTextMetricsA
SetStretchBltMode
CreateFontIndirectA
RestoreDC
RectVisible
SelectObject
SetTextAlign
GetStockObject
GetPixel
SaveDC
CreateCompatibleDC
LineTo
DeleteObject
DeleteDC

kernel32

lstrcmpiW
DeleteFileA
lstrcmpA
GlobalFindAtomA
GetSystemTime
GetWindowsDirectoryA
QueryPerformanceCounter
GetCommandLineA
lstrcmpiA
lstrlenW
RemoveDirectoryA
GetModuleHandleA
CopyFileA
RemoveDirectoryW
FindClose
lstrlenA
VirtualAlloc
VirtualFree

glu32

gluNurbsCallback

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ