cef6c46b6acc01494c11ca8435013d57_JaffaCakes118 | Triage

Sharing

General

Target

cef6c46b6acc01494c11ca8435013d57_JaffaCakes118
Size

151KB
MD5

cef6c46b6acc01494c11ca8435013d57
SHA1

72538dfb56eb438d108378a3136a4ecbd52b738b
SHA256

efb18e37834e15b86f10eb479224cd80c6349ce01fc96062097a0d9a7ed26788
SHA512

481463936f83ff3ca4a8dcabdf01e88c917e87c26d41db527d64128b723bf0944f07ea5790bd4b99f9c0c28314eb2cceb807c6dc2f720d39fae1a68a2ab14fb4
SSDEEP

1536:eqtZ1RjQ8dzGmigqkoMvoXB4c8ZTRm5hGW2+si3t68DNYM3uUT4AhzBNVPO50:lyQ+gqJnBz8Dmr0i348DNYM+UT46Bv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef6c46b6acc01494c11ca8435013d57_JaffaCakes118

Files

cef6c46b6acc01494c11ca8435013d57_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e6af0a3588b2113b3e680ff7ee5ab271

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetModuleHandleA
VirtualAlloc
GetACP
GetCurrentProcessId
lstrlenW
VirtualFree
RemoveDirectoryA

gdi32

RestoreDC
SetMapMode
SetWindowExtEx
GetPixel
LineTo
PatBlt
DeleteDC
GetStockObject
SaveDC

user32

CharNextA
GetParent
GetDC
GetSystemMetrics
DispatchMessageA
TranslateMessage

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Ysbkr Jo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ