ff95476d0de42e0c47d042ed489b631b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff95476d0de42e0c47d042ed489b631b_JaffaCakes118
Size

149KB
MD5

ff95476d0de42e0c47d042ed489b631b
SHA1

973214e4daf09f8737e53e3cdf73366f591b3197
SHA256

4e9b6a06e2d1e19f08522a22c88919383be883e832d4e975d4fcd3e148382e25
SHA512

d3e1d06c90b9e691093feb705beb77060baab290c9921c00e51c6c1d268db4b1fc72f40d6c94c1a00e7eab80f3c32faaf1a37849687e2a93eb031111d25583e1
SSDEEP

3072:juhYU1ANeyk1Kb2k+AxAeWG8iJ/sR6gWyoVSdl:ZUvx155gVW2lgWyoQd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff95476d0de42e0c47d042ed489b631b_JaffaCakes118

Files

ff95476d0de42e0c47d042ed489b631b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

372b8dba2dcc4d06814464ca0e0038ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
GlobalFindAtomW
VirtualAlloc
GetOEMCP
GetLastError
GetCurrentProcess
GetModuleHandleW
VirtualFree
QueryPerformanceCounter
MulDiv
lstrcmpiW

user32

GetParent
GetDC
GetDesktopWindow
DispatchMessageA
CharNextA

gdi32

DeleteObject
SelectObject
DeleteDC
LineTo
SetTextColor
SetBkMode

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Vmilfsiq
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ