05416dc968bd3fac3370b09629edb782_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05416dc968bd3fac3370b09629edb782_JaffaCakes118
Size

113KB
MD5

05416dc968bd3fac3370b09629edb782
SHA1

4066deefed83484d8a6e10f43037ea8fe0e31a87
SHA256

6b2dff500eadad38a0c9917f1b69b3d1834ee4a37a92d380880a95fe48ec751e
SHA512

bbe54e9748bd336b4c1a4594e6f6f62366e7d241e9426fb5e161f44adcf19a89e5971d3c65759cbf81c831db2ab1fa4013e40948a83d849bd7b9fc9777c360e0
SSDEEP

1536:d3Sntco8yOlenj7GmbRAl+v+JcGpgX3ds1NenKGhACSVa0ayc2Yi6b3vOyjPCXAy:dit/8yaWj7+J903dKGhyVflcgyjPCQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05416dc968bd3fac3370b09629edb782_JaffaCakes118

Files

05416dc968bd3fac3370b09629edb782_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff070f89c8c7ba9dddbe315c7f3613ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
VirtualAlloc
GetWindowsDirectoryA
lstrcmpA
QueryPerformanceCounter
lstrlenA
GetSystemTime
lstrlenW
VirtualFree
GetCommandLineA
DeleteFileA
RemoveDirectoryA
GetModuleHandleA
lstrcmpiA
RemoveDirectoryW
FindClose
lstrcmpiW
GlobalFindAtomA

user32

GetParent
GetDC
GetSystemMetrics
CharNextA
GetDesktopWindow
TranslateMessage

gdi32

DeleteObject
CreateSolidBrush
SaveDC
CreatePalette
GetStockObject
SetTextColor
GetPixel
SetStretchBltMode
SetMapMode
LineTo
GetClipBox
GetObjectA
SetTextAlign
SelectObject
RectVisible
GetDeviceCaps
DeleteDC
GetTextMetricsA
CreateFontIndirectA
RestoreDC
CreateCompatibleDC

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ