c92af280ae877aaf79a55e6b110cda29_JaffaCakes118 | Triage

Sharing

General

Target

c92af280ae877aaf79a55e6b110cda29_JaffaCakes118
Size

146KB
MD5

c92af280ae877aaf79a55e6b110cda29
SHA1

94c1a2d71eb6a302afef98963b956abdfd33ecaa
SHA256

9209f5ab033832cc1a7d7a2187b6d8192ea961b5541d29b1138ff95a26db9634
SHA512

2dc4fc9352fc866c67e3814f894d7e063a3aeab77060565e69486e2d60cfba3ada23e478e40a09f9861aaa96b742a54b8da5e6f6355fdee03d671d4ce8e74ab2
SSDEEP

1536:iN/BnNISP83chqcqymoQ64oTaG8blSPXDTpp5bBgYb5CtMxt4k8Ttj/ZgOL9Rp5V:ynN+Mhqv/Rsa2/5BNt4R1gOL9Rp5F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c92af280ae877aaf79a55e6b110cda29_JaffaCakes118

Files

c92af280ae877aaf79a55e6b110cda29_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6718809ad0254c873e37e197c7719454

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
GetPixel
GetStockObject
CreateCompatibleDC
GetObjectA
SetBkMode
DeleteDC
CreatePalette
SetWindowExtEx

user32

GetDesktopWindow
GetSystemMetrics
DispatchMessageA
ShowWindow
GetParent
GetDC

kernel32

GetCommandLineA
GetWindowsDirectoryA
VirtualAlloc
DeleteFileA
GetModuleHandleW
VirtualFree
GetDriveTypeA
GetModuleHandleA
GetThreadLocale

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 895B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Soluxlrf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ