b84f3ad558f05c25e6bcd4e030c5d2d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b84f3ad558f05c25e6bcd4e030c5d2d1_JaffaCakes118
Size

110KB
MD5

b84f3ad558f05c25e6bcd4e030c5d2d1
SHA1

a72f94c3e0c98ccdb775ac1edbcf91bb615859be
SHA256

472f33e0f93261bdbeee030d4d1e5250b3908718d9edf24f47629ee60e0ce8ef
SHA512

b9d664fd50bd21c9ff7f294325798dc83ddf48bd91255ddac2275d75e458cc5275b2b3cdd5aa984800e352be67196e66cbc612d4d4d4ef34adb84c328a37ed01
SSDEEP

1536:Ko6X9SgEvfe913bIzhj1yGx2GH8yvBVz3MQ14RC853i6EbPCAG8TuI:KT9smkzhJyG3H8y/ACUN8TuI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b84f3ad558f05c25e6bcd4e030c5d2d1_JaffaCakes118

Files

b84f3ad558f05c25e6bcd4e030c5d2d1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5d470ab38bd95b093f39cae5ba394ec5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateSolidBrush
SelectPalette
SetTextAlign
GetStockObject
CreateFontIndirectA
GetClipBox
CreatePalette
SelectObject
RectVisible
GetTextMetricsA
GetObjectA
SaveDC
SetStretchBltMode
CreateCompatibleDC
DeleteDC
SetMapMode
GetPixel
GetDeviceCaps
RestoreDC

kernel32

GetModuleHandleA
lstrlenA
QueryPerformanceCounter
GetCommandLineA
VirtualAlloc
GetWindowsDirectoryA
lstrcmpiW
lstrcmpA
VirtualFree
GlobalFindAtomA
lstrcmpiA
DeleteFileA
RemoveDirectoryW
FindClose
CopyFileA
RemoveDirectoryA
GetSystemTime
lstrlenW

user32

GetParent
CharNextA
GetSystemMetrics
GetDC
GetDesktopWindow
TranslateMessage

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ