b1ececbdb4d47d3b3c1eb5db0bccf371_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1ececbdb4d47d3b3c1eb5db0bccf371_JaffaCakes118
Size

119KB
MD5

b1ececbdb4d47d3b3c1eb5db0bccf371
SHA1

ed0c374a44c62f4a9b722e8129c3c2c3861259a7
SHA256

46e2303667fde8a404e2e9afc49aa9922dae91dd53726eb203df3f6f09c989c8
SHA512

4aac6432a098cac157eeec23d34c0a2b68172777618ec4e8b5c298cdded77ff02eaeae2a91f8ffd27b3917084b908324746ef74966db0641bb925afe719718d0
SSDEEP

3072:YBBk2FwlQzGP7fCg+b5GdYnLP2oJ/FxvfnJSICyh:KBNF9M+NOYnaovxv4a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1ececbdb4d47d3b3c1eb5db0bccf371_JaffaCakes118

Files

b1ececbdb4d47d3b3c1eb5db0bccf371_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c4dacc9311f95dd9fcc8458422e76fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
lstrlenA
VirtualAlloc
GlobalFindAtomA
CopyFileA
QueryPerformanceCounter
GetModuleHandleA
VirtualFree
lstrcmpiW
RemoveDirectoryA
lstrcmpA
GetCommandLineA
RemoveDirectoryW
FindClose
GetWindowsDirectoryA
lstrlenW
GetSystemTime
DeleteFileA

gdi32

GetObjectA
RectVisible
SelectPalette
CreateCompatibleDC
RestoreDC
GetDeviceCaps
SaveDC
SelectObject
CreateFontIndirectA
CreateSolidBrush
GetTextMetricsA
DeleteDC
GetStockObject
CreatePalette
DeleteObject
SetStretchBltMode
SetTextAlign
LineTo
GetClipBox
SetTextColor
SetMapMode
GetPixel

user32

CharNextA
GetParent
GetDC
GetDesktopWindow
GetSystemMetrics
TranslateMessage

glu32

gluNurbsCallback

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ