6abfd486e3b4690180d115191b4d0fe0_JaffaCakes118 | Triage

Sharing

General

Target

6abfd486e3b4690180d115191b4d0fe0_JaffaCakes118
Size

115KB
MD5

6abfd486e3b4690180d115191b4d0fe0
SHA1

1db6cbb0660cd2ca66928245cab8ccffe49df037
SHA256

d6170d1f8314342e2a6f111a2472d050e716ed0c3f9519eb24ae8698c505918c
SHA512

4954e7e5f5d2d2a3e4cc054cf61404a7205eb6503b1221b57caccbb2a152101e92ec11074a96193702ecaf523342c0b8f6da4bb8bcd6ae064f16805a5a547b7a
SSDEEP

1536:XvObWCS65fEHkxjFdFwFhapf2VkaPxMYcqRROaNiIxXS0IPZvH:Wq769EH9FFVMY+iIPZvH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6abfd486e3b4690180d115191b4d0fe0_JaffaCakes118

Files

6abfd486e3b4690180d115191b4d0fe0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a3d0691830f888e8b952321a52775741

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcmpiA
CopyFileA
QueryPerformanceCounter
RemoveDirectoryA
GetCommandLineA
DeleteFileA
lstrlenW
GetModuleHandleA
GetSystemTime
lstrcmpiW
VirtualAlloc
lstrcmpA
GlobalFindAtomA
GetWindowsDirectoryA
VirtualFree
RemoveDirectoryW
FindClose

gdi32

RestoreDC
GetTextMetricsA
DeleteObject
SaveDC
DeleteDC
SetMapMode
SelectPalette
GetClipBox
CreatePalette
SetStretchBltMode
GetPixel
SetTextAlign
CreateSolidBrush
SetTextColor
CreateCompatibleDC
SelectObject
LineTo
GetDeviceCaps
RectVisible

user32

GetSystemMetrics
GetDC
GetDesktopWindow
GetParent
CharNextA
TranslateMessage

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ