6965941b6a0e9eefef0c5101ee8c3d77_JaffaCakes118 | Triage

Sharing

General

Target

6965941b6a0e9eefef0c5101ee8c3d77_JaffaCakes118
Size

97KB
MD5

6965941b6a0e9eefef0c5101ee8c3d77
SHA1

480cdff83d6d757f5cdb56a202b4e823691259ce
SHA256

d0483599f07182538a9954974e0d7b79d051883d9b4da7653976d45ef36cce30
SHA512

680cfc8f8ed3fbe6da467862a1e63905da1a3f94fad8d01bb882bddc962d3a59899ddac7359d13522540c9c9c8a177ce39c967d4dcd27fda82ad54fe6ab2eb20
SSDEEP

1536:vifLaL67IjKO9+71gIUoBgG5WeLrdDW1H9Vwz+hvDPrUeqM/kHGAXtB8ROug7/HR:KzaL4Ihdo+wxi1HSGrrs1I6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6965941b6a0e9eefef0c5101ee8c3d77_JaffaCakes118

Files

6965941b6a0e9eefef0c5101ee8c3d77_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b2368b8fac5727e9419f60b8f96ebba0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
DispatchMessageA
TranslateMessage
ShowWindow
GetDesktopWindow
GetDC

kernel32

GetCurrentThread
GetDriveTypeA
GetCommandLineW
SetLastError
GetUserDefaultLangID
GetACP
VirtualAlloc
lstrcmpA
DeleteFileW
GetProcessHeap
VirtualFree

gdi32

CreateFontIndirectA
GetDeviceCaps
DeleteObject
SaveDC
SetWindowExtEx
GetClipBox

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 969B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Nalftflu
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ