fbeab25dd91c961ff0d529109dbac2f2_JaffaCakes118 | Triage

Sharing

General

Target

fbeab25dd91c961ff0d529109dbac2f2_JaffaCakes118
Size

102KB
MD5

fbeab25dd91c961ff0d529109dbac2f2
SHA1

06b255824abec31fc722fd4a8648b72aafa87903
SHA256

14591173d0c34c1fcebb158077e0578f33f4f0cbe786aebb0fad13390afaca1f
SHA512

01467a5687484da46e6fc7890ea1373441ed1163850056bf0256d50310ab4e1b6ebc54f272765ce7dcfe7c12c90f79097420c77e4016b070ec96f92e1daa46ca
SSDEEP

1536:17bl4s270Wsyr1bfm+uqEIPvhAbB8WAQqa6x68FYK4bHI5M3itE/m9Il9Bgh1lq:1fl43gNe1beDInhW4r7MI5bIl9BgDl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbeab25dd91c961ff0d529109dbac2f2_JaffaCakes118

Files

fbeab25dd91c961ff0d529109dbac2f2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

96b9590e5fe4280a192cd6ebebb64f41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
GetParent
GetDC
TranslateMessage
GetDesktopWindow
GetSystemMetrics

kernel32

VirtualAlloc
lstrcmpA
lstrlenW
RemoveDirectoryA
GlobalFindAtomA
QueryPerformanceCounter
GetCommandLineA
VirtualFree
GetWindowsDirectoryA
GetModuleHandleA
CopyFileA
RemoveDirectoryW
FindClose
lstrcmpiW
GetSystemTime
lstrcmpiA
lstrlenA

gdi32

CreateFontIndirectA
RestoreDC
GetObjectA
GetStockObject
SelectPalette
GetPixel
LineTo
GetDeviceCaps
DeleteDC
SetMapMode
DeleteObject
CreateSolidBrush
GetTextMetricsA
SaveDC
SetTextColor
SelectObject
GetClipBox
SetTextAlign
SetStretchBltMode

glu32

gluNurbsCallback

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ