94d94e7128bb192b7882ab6a00955af2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94d94e7128bb192b7882ab6a00955af2_JaffaCakes118
Size

112KB
MD5

94d94e7128bb192b7882ab6a00955af2
SHA1

137a6cd5da1e7c9b64671f5034e7a96d85798d97
SHA256

972886022068c7aa96377a411eba22458e64985f82a17d85608ea45be4f237a3
SHA512

b5710fc32c584f32add5a352bd26a9976d304c2d64dec54d2ec0b31daa6d3a4ba8449d1e7ed3140d947c2d7e0f28ba5c2ab282d22a67548c0a06e24ed1e33e97
SSDEEP

1536:NwZERm6wO3d1yDKfswYYsC+q50YxEdMdYdSLUqjWX3StTY5QltP69rX1i6EFrlGX:NwZEQM35riC+q5X+2bjkKMEZkuGEkCk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d94e7128bb192b7882ab6a00955af2_JaffaCakes118

Files

94d94e7128bb192b7882ab6a00955af2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afd9c8d8cfb2fd1659f4015af5034124

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
RemoveDirectoryA
lstrlenW
lstrcmpA
lstrcmpiW
GetSystemTime
QueryPerformanceCounter
GetModuleHandleA
GetCommandLineA
lstrcmpiA
DeleteFileA
CopyFileA
GetWindowsDirectoryA
RemoveDirectoryW
GlobalFindAtomA
FindClose
VirtualAlloc
VirtualFree

gdi32

GetObjectA
LineTo
CreateFontIndirectA
SetStretchBltMode
SaveDC
DeleteDC
GetDeviceCaps
DeleteObject
CreateCompatibleDC
SelectPalette
SetTextColor
SelectObject
RestoreDC
SetTextAlign
GetStockObject
GetTextMetricsA
SetMapMode
CreatePalette
CreateSolidBrush
RectVisible

user32

GetSystemMetrics
GetDC
CharNextA
TranslateMessage
GetParent
GetDesktopWindow

glu32

gluNurbsCallback

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ