b7b82c2c32326c2ff85669191dd90dd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7b82c2c32326c2ff85669191dd90dd3_JaffaCakes118
Size

110KB
MD5

b7b82c2c32326c2ff85669191dd90dd3
SHA1

72402c4a13195fe11d07ceef678b6ffb8cb8770a
SHA256

d03c0e433af28f670b241367597797f7af2b91bd68bb85f8f6d6ea5e4f392bcd
SHA512

ec79791a915f7d16fc56ed542a1cf794524c1598b1e0b36c1e0e6319a9cc6b28c926050aba8d09c867af66deb865c60a9826051697531391b19a331d494051fb
SSDEEP

3072:WdHcHRpJq6P2kbHg/mP8dxrvJSES/M9i:HY6PfbHg/eSJSk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7b82c2c32326c2ff85669191dd90dd3_JaffaCakes118

Files

b7b82c2c32326c2ff85669191dd90dd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18e126bbac20ae34ae1b838fd728a9a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateSolidBrush
CreatePalette
GetObjectA
CreateFontIndirectA
RectVisible
GetTextMetricsA
SetTextAlign
SaveDC
SetTextColor
SetStretchBltMode
SelectPalette
GetClipBox
LineTo
GetStockObject
SelectObject
RestoreDC
DeleteObject
GetPixel
GetDeviceCaps
SetMapMode

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcmpA
CopyFileA
GetModuleHandleA
lstrcmpiA
QueryPerformanceCounter
GetCommandLineA
lstrlenW
GlobalFindAtomA
RemoveDirectoryW
FindClose
lstrcmpiW
RemoveDirectoryA
DeleteFileA
GetSystemTime
VirtualAlloc
VirtualFree

user32

GetDC
GetSystemMetrics
GetDesktopWindow
TranslateMessage
GetParent
CharNextA

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ