a1699c888611dec427cdde141d7539ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1699c888611dec427cdde141d7539ca_JaffaCakes118
Size

150KB
MD5

a1699c888611dec427cdde141d7539ca
SHA1

646c48b3be8438b997953ad9c3fd466083e1aa9a
SHA256

bba854fd518dd1bde1386218e62e694ff16895a9f52ae4a8fbf9ed2c68274063
SHA512

0cd2a66840b60968d38ecc6e57b7b8a93d1cb5a928b47c1e3fc856744378641ba07e2215545022cda15ba8f10758a580a4a71a49246d5890bcf5a54eac85cd40
SSDEEP

1536:2hY3lJR1fZ/obI6UF4VBgI+Ka3C8kaqTiQpLdC3aX6gYzOP/u6BiXYGpoExP++y3:0Y1JR1f5obLVBg/8TPwg6gwO+P3L++

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1699c888611dec427cdde141d7539ca_JaffaCakes118

Files

a1699c888611dec427cdde141d7539ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1fab8fb0e6bedb56ec8c5a58eea2398a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetUserDefaultLangID
GetStartupInfoA
GetConsoleOutputCP
GlobalFindAtomW
GetProcessHeap
VirtualAlloc
VirtualFree

user32

GetParent
ShowWindow
CharNextA
GetSystemMetrics
GetDC
TranslateMessage
GetDesktopWindow

gdi32

SelectObject
SetBkMode
CreateSolidBrush
SaveDC
DeleteDC
GetPixel
MoveToEx
GetStockObject

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 959B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Ctua. Is
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ