dce40f1f4b04f4343876c81d5686bba4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dce40f1f4b04f4343876c81d5686bba4_JaffaCakes118
Size

97KB
MD5

dce40f1f4b04f4343876c81d5686bba4
SHA1

98b6681dedf6f36b0d922535db4626683c05a1c8
SHA256

2c1a3f839dd812ea680ddcc369688ebefd32268c9076448405d7dd890a917100
SHA512

2004f7e086ea88578b1bdf5c6e52a5976d2110ec0ce641d3cbfdfe8277e0ff11803fae2096561da6716d3f54314bfbcd420cf6bbd1c871f539439fadcecd6b48
SSDEEP

3072:nWIMVCJpE90zYEKbfPFYyzljnaVmK8l/3qs:7MKFifPFYwTks

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dce40f1f4b04f4343876c81d5686bba4_JaffaCakes118

Files

dce40f1f4b04f4343876c81d5686bba4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7fb90eaff5410d5bc054a390d7258a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetBkMode
SetWindowExtEx
GetDeviceCaps
GetPixel
GetTextMetricsA
DeleteObject

user32

GetParent
CharNextA
GetDesktopWindow
DispatchMessageA
GetDC
ShowWindow
GetSystemMetrics

kernel32

lstrcmpiA
VirtualAlloc
GetCurrentProcess
GetUserDefaultLangID
lstrcmpiW
MulDiv
VirtualFree
CopyFileA
GetWindowsDirectoryA

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 917B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Olojdu H
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ