aead378d27e361e875ec851fa07bd4b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aead378d27e361e875ec851fa07bd4b1_JaffaCakes118
Size

150KB
MD5

aead378d27e361e875ec851fa07bd4b1
SHA1

067cb3e1bb47affc99718db5402bd353617945ea
SHA256

6645d43651409e904d87cd2eb9508600a76e988d00370cc9e66056d51350a5de
SHA512

ff9d86a0fe3855b61f39a10be734ca7d46a30dd96085f9b4a84bfe7217f0851bc423ad7a067095bb49913fe50cce53f0e107b97ab92af6ace19b7b5569f81478
SSDEEP

3072:YGv7vGcHe7veISeCTQlZvnxmDi5eAp2M70:YgkhCsLvnxmDi5eA8N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aead378d27e361e875ec851fa07bd4b1_JaffaCakes118

Files

aead378d27e361e875ec851fa07bd4b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8ef3efe977584942c265f54f2696d9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
GetParent
GetDC

kernel32

DeleteFileW
VirtualAlloc
GetCurrentThread
MulDiv
GetConsoleOutputCP
VirtualFree
GetCommandLineW
GetCommandLineA
GetVersion
DeleteFileA
lstrcmpA
QueryPerformanceCounter
GetCurrentThreadId
GetUserDefaultLangID
lstrcmpiW

gdi32

GetPixel
CreateFontIndirectA
MoveToEx
RestoreDC
RectVisible
SaveDC

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 881B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Syjqreqc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ