897fe8678edea27430659070fcd57524_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

897fe8678edea27430659070fcd57524_JaffaCakes118
Size

109KB
MD5

897fe8678edea27430659070fcd57524
SHA1

c86940337956ea34291331bca5866cc2c6a01a65
SHA256

a7c08e954ccb7458e7c32691b457556fe0da27eee99ee83cea81630b0bc2df1c
SHA512

842a90f2dc690f005ee6967befcf37d3a61ed65301bd8741289470a9e92d7eb7162bb1ca2a93d2fe8d6a42066c46fc73906882ede3fee48af8ada3f64b35fcec
SSDEEP

3072:Zghg1X6wgvcob8irGCDAKBs74bWIFh50BS+5:ZgkKwgvcob8LCs8ISJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
897fe8678edea27430659070fcd57524_JaffaCakes118

Files

897fe8678edea27430659070fcd57524_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b14eb7fa4980cc249cc352c10429bf33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
GetDesktopWindow
CharNextA
TranslateMessage
GetDC
GetSystemMetrics

kernel32

RemoveDirectoryA
GetSystemTime
lstrcmpiA
QueryPerformanceCounter
lstrlenW
GetWindowsDirectoryA
GetModuleHandleA
GetCommandLineA
DeleteFileA
lstrcmpA
GlobalFindAtomA
CopyFileA
lstrcmpiW
lstrlenA
RemoveDirectoryW
FindClose
VirtualAlloc
VirtualFree

gdi32

DeleteObject
GetDeviceCaps
CreateFontIndirectA
SaveDC
SetTextAlign
GetStockObject
GetPixel
GetClipBox
SelectObject
SetTextColor
SelectPalette
RestoreDC
SetMapMode
CreatePalette
CreateCompatibleDC
GetTextMetricsA
CreateSolidBrush
GetObjectA
SetStretchBltMode
RectVisible

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ