b700a48e6c97d915b08d55897fc92781_JaffaCakes118 | Triage

Sharing

General

Target

b700a48e6c97d915b08d55897fc92781_JaffaCakes118
Size

150KB
MD5

b700a48e6c97d915b08d55897fc92781
SHA1

a002cfdfa7785c333c0cb94ae193968fa65172b4
SHA256

4d5c916f9eb906ed55b50d77f941b87e90fb6b7210bdd01b3d2e7c3de8df85f4
SHA512

721d5db85dcc05f61d2c3d55c76f2257dbd57942bad60c9bb557536c93f72af525399a1ba6be3a050807b507408cf7e45f491e25ea25f93622f6ad05f0f2011a
SSDEEP

1536:8FgelkblZLCTVc47JzIXoo04wBf84B/n9MDKJPv9Yqh1IdVMIBZOFl6uR:8FDOZLCj7Y9wh7/9AgaEIBkz6u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b700a48e6c97d915b08d55897fc92781_JaffaCakes118

Files

b700a48e6c97d915b08d55897fc92781_JaffaCakes118
.exe windows:5 windows x86 arch:x86

46a246ad43292c1b2b7aee2873798381

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetLastError
GetOEMCP
DeleteFileW
GetConsoleOutputCP
MulDiv
GetTickCount
VirtualAlloc
QueryPerformanceCounter
GetDriveTypeA
GetModuleHandleW
VirtualFree

user32

GetDC
TranslateMessage
CharNextA
DispatchMessageA
GetSystemMetrics
GetDesktopWindow
GetParent
ShowWindow

gdi32

CreateSolidBrush
SetBkMode
DeleteObject
GetStockObject
GetDeviceCaps
RestoreDC

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Lwvjtu S
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ