6117281cc8a675253d38ea98a56ed743_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6117281cc8a675253d38ea98a56ed743_JaffaCakes118
Size

109KB
MD5

6117281cc8a675253d38ea98a56ed743
SHA1

2847e347550bfd3e28bb2721af047c1fbd7b649a
SHA256

194e4a23c34cce9fce99107f7fa0d0b9c6d13d0eba2cca4e7ddc8ec7ab56a1ba
SHA512

adbec7b238c87f584406e122324aea83c269e2dde9e86471d169004ff7631a8cfc628329130a835a2a336be8fbb6a6b2776224781e0d27331f27b8a9168351ce
SSDEEP

1536:dIAJZsMvuxC9ZfufxTiqRudW47md0tj8bz/he/hXi1h2w/MB/aHi6JIofLRxP:dIAJPWoZfgTiLdW+md06bzItiWB0LX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6117281cc8a675253d38ea98a56ed743_JaffaCakes118

Files

6117281cc8a675253d38ea98a56ed743_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96f26a1daaef06f4006eb5fd023ea4d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

LineTo
GetStockObject
RestoreDC
SetStretchBltMode
DeleteObject
CreatePalette
GetClipBox
CreateFontIndirectA
SaveDC
GetPixel
SelectObject
GetDeviceCaps
SetTextAlign
GetTextMetricsA
DeleteDC
CreateCompatibleDC
CreateSolidBrush
SetTextColor

kernel32

GetWindowsDirectoryA
GetCommandLineA
RemoveDirectoryW
GetSystemTime
FindClose
lstrlenA
lstrcmpiA
QueryPerformanceCounter
lstrcmpA
GetModuleHandleA
DeleteFileA
CopyFileA
lstrcmpiW
RemoveDirectoryA
lstrlenW
VirtualAlloc
VirtualFree

user32

GetParent
GetSystemMetrics
TranslateMessage
CharNextA
GetDC
GetDesktopWindow

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ