b46a6d4ddb5abd847c4a22bf86f3246d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b46a6d4ddb5abd847c4a22bf86f3246d_JaffaCakes118
Size

106KB
MD5

b46a6d4ddb5abd847c4a22bf86f3246d
SHA1

c94b58b5ec41df6b086264f62d3248b11ccc9a65
SHA256

1c6e345553100f562f733f3274f1ccc50ab831c141b4ba49ad74a927c68392d9
SHA512

12c063645c6336e266870ffa559bd9293f342bc7a61186fb4ccaff73b3c21326c64599cb8d327a783f1583fabcb95e0d28bb3e336d1b6bd3ab34c17fd259d4c3
SSDEEP

3072:nLjmGtd+bw2GI14S4l/IQlULYTvDHEkWCNuL:WGuUZz2LSG0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b46a6d4ddb5abd847c4a22bf86f3246d_JaffaCakes118

Files

b46a6d4ddb5abd847c4a22bf86f3246d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

44b327298131ad870457f16c99fbc857

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
RemoveDirectoryA
lstrcmpiW
lstrlenW
CopyFileA
GetCommandLineA
GetWindowsDirectoryA
GetModuleHandleA
GetSystemTime
lstrlenA
lstrcmpA
DeleteFileA
lstrcmpiA
RemoveDirectoryW
FindClose
QueryPerformanceCounter
VirtualAlloc
VirtualFree

gdi32

CreatePalette
GetClipBox
CreateFontIndirectA
SetMapMode
SelectPalette
RestoreDC
RectVisible
SetTextColor
DeleteObject
CreateSolidBrush
SetTextAlign
GetPixel
LineTo
GetStockObject
CreateCompatibleDC
GetDeviceCaps
SaveDC
SetStretchBltMode
GetTextMetricsA
GetObjectA

user32

GetParent
GetSystemMetrics
CharNextA
GetDesktopWindow
GetDC
TranslateMessage

glu32

gluNurbsCallback

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ