8b195c3989b78809f8b4b2ddbcc47208_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b195c3989b78809f8b4b2ddbcc47208_JaffaCakes118
Size

110KB
MD5

8b195c3989b78809f8b4b2ddbcc47208
SHA1

d0370be27d6c0fa80eb506c4ef77752f960163a2
SHA256

41d16bf233ec3e133854fa9ebf7ee97dc8ed346025351cd821de9fade3a68cb8
SHA512

8b006543606175b08a88d6d3ca64d8344b551576c44551102b1639b62be00de81c3706b459114756512c6699bc24e6ab1c709062701275414eaae1973869d1cc
SSDEEP

1536:wcOxApaCQ1ylyGN3om/H8XV9m13FLOQ4qoYnxbDcdf9LPKZ3i/EjlT7RM+bT:wOhQ1ybNNAXm1VsqoaefdyN7RM+bT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b195c3989b78809f8b4b2ddbcc47208_JaffaCakes118

Files

8b195c3989b78809f8b4b2ddbcc47208_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d1fd87440ba1c57ae42f82f21a7b8d4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrcmpiW
CopyFileA
lstrlenA
lstrcmpiA
GetCommandLineA
RemoveDirectoryW
FindClose
lstrlenW
QueryPerformanceCounter
lstrcmpA
GetModuleHandleA
DeleteFileA
RemoveDirectoryA
GetSystemTime
GlobalFindAtomA
VirtualAlloc
VirtualFree

gdi32

CreatePalette
CreateCompatibleDC
RectVisible
SetTextAlign
SelectPalette
SetStretchBltMode
GetDeviceCaps
LineTo
DeleteDC
SaveDC
SelectObject
DeleteObject
GetClipBox
RestoreDC
SetTextColor
GetObjectA
SetMapMode
GetTextMetricsA
CreateSolidBrush
GetPixel

user32

GetDC
GetSystemMetrics
GetParent
TranslateMessage
CharNextA
GetDesktopWindow

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ