b6ee836bbad1bbbb58e53509c4bda076_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6ee836bbad1bbbb58e53509c4bda076_JaffaCakes118
Size

108KB
MD5

b6ee836bbad1bbbb58e53509c4bda076
SHA1

1b3829c030b525573059a6011ab42b2e485cd856
SHA256

2d44f3175906f4ae0936e37cac1cef1bd26c1f573cb548d1044a370eb2cee431
SHA512

ae45b50898a679ac1fcca2dc1f66695ab88a183432325cbc805dab5efaef95d31752df202e731eb1c0c49f02b1eaa8dacdf1ca7e81edad8f3fe486044d7ecaba
SSDEEP

1536:BXwUmgquQ4rL3s3pWcIP8zXRFC2L0fxKWzG8Y2Hcg17clm4A+p366cLTx0TjfY5:BAN2Q4H3u0cm8znKj8gBx4Js0TzY5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6ee836bbad1bbbb58e53509c4bda076_JaffaCakes118

Files

b6ee836bbad1bbbb58e53509c4bda076_JaffaCakes118
.exe windows:4 windows x86 arch:x86

753416b5827266d2ecfc49bf913f060d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
GetSystemTime
lstrlenA
RemoveDirectoryA
CopyFileA
GetModuleHandleA
RemoveDirectoryW
lstrcmpiA
FindClose
DeleteFileA
lstrcmpiW
GetWindowsDirectoryA
QueryPerformanceCounter
lstrcmpA
lstrlenW
VirtualAlloc
VirtualFree

gdi32

CreateSolidBrush
GetPixel
DeleteObject
RestoreDC
LineTo
RectVisible
SelectObject
CreateFontIndirectA
SetMapMode
GetDeviceCaps
DeleteDC
SetTextColor
SaveDC
GetTextMetricsA
GetStockObject
GetClipBox
CreateCompatibleDC
CreatePalette
GetObjectA
SetTextAlign
SetStretchBltMode

user32

GetDC
CharNextA
TranslateMessage
GetDesktopWindow
GetParent
GetSystemMetrics

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ