bd1953204e42d4d6e23bc23a4c217648_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd1953204e42d4d6e23bc23a4c217648_JaffaCakes118
Size

106KB
MD5

bd1953204e42d4d6e23bc23a4c217648
SHA1

bfe0865065d5b272d2c49ce6a13715d8f17c13e8
SHA256

146519374bc66f2ca1f822fcfd10b5054982ed32ed508aa3b09e1a468bceb159
SHA512

682f3847085154760bdde03698b134520f00c86da71e27dad099df69ab684ba7109f535c516b42bae40daecec8f4c0a9869db056ff174880ee13d090d9565899
SSDEEP

1536:Y83RARAghQwegIZaJ9JmVXmfBJZMmJ1A0ZdyHz3F6EIchhLb5O:9CughhebmZDMmJ6MCbhLb5O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd1953204e42d4d6e23bc23a4c217648_JaffaCakes118

Files

bd1953204e42d4d6e23bc23a4c217648_JaffaCakes118
.exe windows:5 windows x86 arch:x86

07d3a91571fd1dc83ca75461fbc20d2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateFontIndirectA
SelectPalette
DeleteDC
GetDeviceCaps
SetMapMode
SetTextColor
GetClipBox
GetObjectA
DeleteObject
CreatePalette
GetTextMetricsA
CreateCompatibleDC
CreateSolidBrush
GetPixel
SetTextAlign
LineTo
SelectObject
GetStockObject
RestoreDC
RectVisible

kernel32

lstrlenA
VirtualAlloc
lstrcmpiA
GetCommandLineA
GetModuleHandleA
RemoveDirectoryA
VirtualFree
CopyFileA
QueryPerformanceCounter
lstrlenW
GetWindowsDirectoryA
lstrcmpA
GetSystemTime
GlobalFindAtomA
lstrcmpiW
DeleteFileA
RemoveDirectoryW
FindClose

user32

GetParent
TranslateMessage
CharNextA
GetDesktopWindow
GetDC
GetSystemMetrics

glu32

gluNurbsCallback

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ