b8baeff0cde56a050c9ab0d6f71997f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8baeff0cde56a050c9ab0d6f71997f0_JaffaCakes118
Size

117KB
MD5

b8baeff0cde56a050c9ab0d6f71997f0
SHA1

fa5d2fee8cd76ab2c84c68b57b0d550bdb953c86
SHA256

044e2316873fb7de90320cc9bd27ede290aeab322fb563a876b67a8ddde89ac8
SHA512

dc1e5d1669a5b77e17f490cbb86350b4f32772838d2c190ecd59750d49651df987704a9b848317355eab93d395186359e8543b0ce8e8e7b3569714953ff4d07b
SSDEEP

3072:8lfymuuO+i2fGCKpx5yETfg1IgTSMuGXT/p8aDS71:qfyAQ2fKpBTuO1GXT3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8baeff0cde56a050c9ab0d6f71997f0_JaffaCakes118

Files

b8baeff0cde56a050c9ab0d6f71997f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa866cb5f82b4f4f1f47eb00178a51d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
QueryPerformanceCounter
lstrcmpiA
lstrlenA
lstrcmpiW
CopyFileA
RemoveDirectoryA
VirtualAlloc
lstrcmpA
VirtualFree
GetModuleHandleA
lstrlenW
DeleteFileA
GetCommandLineA
GlobalFindAtomA
RemoveDirectoryW
GetSystemTime
FindClose

user32

GetParent
CharNextA
GetDC
GetSystemMetrics
TranslateMessage
GetDesktopWindow

gdi32

RestoreDC
SelectObject
GetClipBox
CreatePalette
DeleteObject
SelectPalette
CreateCompatibleDC
GetPixel
SetMapMode
CreateSolidBrush
LineTo
SetStretchBltMode
CreateFontIndirectA
SaveDC
GetStockObject
GetTextMetricsA
SetTextColor
DeleteDC
GetObjectA
RectVisible
SetTextAlign

glu32

gluNurbsCallback

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ