87156bfdfe5567a1953ab0f316e0946d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87156bfdfe5567a1953ab0f316e0946d_JaffaCakes118
Size

112KB
MD5

87156bfdfe5567a1953ab0f316e0946d
SHA1

25bc60846c2c0aa25a91f5ce7d1c074e782ec6ff
SHA256

1cf38e74e94ec01ff60365919961ef354b57c445a89b7e10c7e8e0bedcbe79b4
SHA512

a6dd9e78efd49d0f0e020d38fda0198106eec304d5f82ae02350f387022bad29f5bc59c27ceb434c9f3a7d4e8c90486dba7d1d6093e19fd1a9c1d1e7fe4f2c95
SSDEEP

3072:YwQzULnf36tsWgbTYWUBoAvc+LPBaGpVkS8bLP:YwQ4Lf+aTYhomJLPgGpD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87156bfdfe5567a1953ab0f316e0946d_JaffaCakes118

Files

87156bfdfe5567a1953ab0f316e0946d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f490ffcb86a3ba2504d71988ed5981c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixel
CreatePalette
GetStockObject
GetTextMetricsA
SaveDC
SetTextColor
GetDeviceCaps
DeleteObject
SelectObject
RectVisible
CreateCompatibleDC
CreateSolidBrush
GetClipBox
SetMapMode
SetTextAlign
SetStretchBltMode
LineTo
GetObjectA
CreateFontIndirectA
RestoreDC
DeleteDC

kernel32

GetSystemTime
CopyFileA
GlobalFindAtomA
lstrlenW
GetModuleHandleA
lstrcmpA
VirtualAlloc
DeleteFileA
lstrcmpiA
GetCommandLineA
RemoveDirectoryA
lstrlenA
lstrcmpiW
VirtualFree
QueryPerformanceCounter
GetWindowsDirectoryA
RemoveDirectoryW
FindClose

user32

CharNextA
GetDC
GetSystemMetrics
GetDesktopWindow
TranslateMessage
GetParent

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ