d392a9e9109530865f08d179beb76274_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d392a9e9109530865f08d179beb76274_JaffaCakes118
Size

107KB
MD5

d392a9e9109530865f08d179beb76274
SHA1

4f834ed1e977e9e0f939a98516180834b4ded97e
SHA256

912ee5a9f4fc7cab64a5e89e17f77c3d32f7cb2c347a4121f7dec71b975d5a27
SHA512

99e2f4e879355edcdf681f8f2a293d29b3090e3de7215f27eab8021d1bb0958146fb299eaaf8043770b8cfd031553c797cd3457de2b1c7a5bafd21f3009b5b87
SSDEEP

3072:sDKkbEGDsEd6Y4RmXSjKyUw0OAHA+2ZI:cKlGD8R1jK+0Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d392a9e9109530865f08d179beb76274_JaffaCakes118

Files

d392a9e9109530865f08d179beb76274_JaffaCakes118
.exe windows:5 windows x86 arch:x86

92fd827cd8d1bb40170ffe408590bfb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixel
DeleteDC
CreateSolidBrush
GetStockObject
RestoreDC
DeleteObject
SelectPalette
LineTo
RectVisible
CreateCompatibleDC
SelectObject
CreatePalette
CreateFontIndirectA
SetTextAlign
GetObjectA
SetTextColor
GetClipBox
GetDeviceCaps
SetMapMode

kernel32

GetWindowsDirectoryA
GetModuleHandleA
CopyFileA
lstrcmpiA
lstrlenA
GetSystemTime
lstrlenW
DeleteFileA
GetCommandLineA
VirtualAlloc
VirtualFree
lstrcmpiW
QueryPerformanceCounter
RemoveDirectoryW
FindClose
RemoveDirectoryA
lstrcmpA

user32

GetParent
GetDC
GetDesktopWindow
GetSystemMetrics
CharNextA
TranslateMessage

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ