fd15aeb0e9d08022cef4e05a8e40a3c4_JaffaCakes118 | Triage

Sharing

General

Target

fd15aeb0e9d08022cef4e05a8e40a3c4_JaffaCakes118
Size

57KB
MD5

fd15aeb0e9d08022cef4e05a8e40a3c4
SHA1

6892b89fa93f2f424b9da9b12adf5df71ecc9157
SHA256

58b3004ef93823affdcf0909bb5a2fd205329d8e2bb37b78b3e746ccca5c19c8
SHA512

e0b1e17f773b25dda36fe8855facf158778f67b471b5700732dfcf58e6c21afd2f4689d1c7cbac3f5e253967e82747a61944e15690226395ab31cc549805cdcf
SSDEEP

1536:PtOlohEo3RclzdT95CDKJRl6MOF5yqgqtPHYE/3APRo:PgloLqdWDcl6z7T5/3AO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd15aeb0e9d08022cef4e05a8e40a3c4_JaffaCakes118

Files

fd15aeb0e9d08022cef4e05a8e40a3c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c06d88fa87f42349dbfe427df7552259

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDeviceCaps
SetTextColor
SaveDC
SetTextAlign
GetStockObject
CreateFontIndirectA
CreatePalette
GetClipBox
DeleteObject
GetPixel
GetObjectA
RestoreDC
SetMapMode
RectVisible
GetTextMetricsA
CreateSolidBrush
CreateCompatibleDC
SetStretchBltMode
SelectPalette
DeleteDC

kernel32

CopyFileA
lstrcmpiA
lstrlenA
GlobalFindAtomA
GetSystemTime
GetModuleHandleA
lstrcmpiW
GetCommandLineA
RemoveDirectoryW
lstrcmpA
FindClose
GetWindowsDirectoryA
RemoveDirectoryA
lstrlenW
DeleteFileA
QueryPerformanceCounter
VirtualAlloc
VirtualFree

user32

GetDC
CharNextA
GetSystemMetrics
GetParent
TranslateMessage
GetDesktopWindow

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ