c05e86f5b87dbcc9ba50ae41016cf5cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c05e86f5b87dbcc9ba50ae41016cf5cb_JaffaCakes118
Size

120KB
MD5

c05e86f5b87dbcc9ba50ae41016cf5cb
SHA1

c833db75fcbec9deaf5efb66032ddd8c634b65ea
SHA256

963b90f1f9b1e03ff807f2ea21ff1c3ba044ecd5e5d76ab8ee9be0180a020142
SHA512

fb23a2af44b5b5edbfb00f4dc454c4957919c6c138bc51f527f8e159e7f8c5204c40d1dc0d612cc9c59476161d45ba677b6dd09521aa811e06a934ef01c886d2
SSDEEP

1536:hYwBsyblAsq15E7+CE9pzUMDddjlYm+e3rjfFcNZ6x89DpCb5ihEsWjw7+OSmLcH:hYjkiv10cpxpdpYm+evdcNDT7+OSmLZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c05e86f5b87dbcc9ba50ae41016cf5cb_JaffaCakes118

Files

c05e86f5b87dbcc9ba50ae41016cf5cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b11bb0fee3483a24145d03c51261ae3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectPalette
SetStretchBltMode
CreateSolidBrush
SelectObject
GetPixel
LineTo
GetClipBox
SetTextColor
SaveDC
SetMapMode
CreatePalette
CreateFontIndirectA
RestoreDC
GetDeviceCaps
DeleteDC
SetTextAlign
GetTextMetricsA
DeleteObject
RectVisible

user32

GetSystemMetrics
GetDC
TranslateMessage
GetDesktopWindow
GetParent
CharNextA

kernel32

GetWindowsDirectoryA
CopyFileA
VirtualAlloc
GetSystemTime
lstrcmpiW
GlobalFindAtomA
GetModuleHandleA
VirtualFree
RemoveDirectoryW
FindClose
RemoveDirectoryA
DeleteFileA
lstrcmpiA
QueryPerformanceCounter
GetCommandLineA
lstrcmpA
lstrlenW

glu32

gluNurbsCallback

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ