0bbc4949007a1569fd3822d11b44c159_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bbc4949007a1569fd3822d11b44c159_JaffaCakes118
Size

105KB
MD5

0bbc4949007a1569fd3822d11b44c159
SHA1

b88c872758856931c9e3c5ef74849793fd4d56e7
SHA256

7548b480384c50f8a053bff1b7df7edb3536b2b2e8ed43c7df1a239f2f80ccad
SHA512

6af50a5a49141a1c51d30af0f0528a8f01a5b3483437675f2bbdea35545d34e82fb371c040025d443ee36ef16b66a963d48e1e6b2cf6a26fb4abd8ef4f6d65cb
SSDEEP

1536:JSd7DOHaVJKKGviSsP3ITHox/2S3nww+MI30E4l9wEx5/c:J23O6V4iSg3IzYOO+EwEx5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bbc4949007a1569fd3822d11b44c159_JaffaCakes118

Files

0bbc4949007a1569fd3822d11b44c159_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5300e1a24b10962bf86b76449a3dd39c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
CharNextA
GetDC
TranslateMessage
GetSystemMetrics
GetParent

gdi32

CreateSolidBrush
DeleteObject
RectVisible
SetTextAlign
DeleteDC
LineTo
CreatePalette
RestoreDC
SetTextColor
SelectObject
SelectPalette
SaveDC
GetStockObject
GetDeviceCaps
GetTextMetricsA
GetObjectA
SetStretchBltMode
CreateFontIndirectA
CreateCompatibleDC
GetClipBox
SetMapMode

kernel32

lstrcmpiA
QueryPerformanceCounter
RemoveDirectoryA
GetSystemTime
GetWindowsDirectoryA
lstrcmpA
GlobalFindAtomA
CopyFileA
lstrlenA
VirtualAlloc
DeleteFileA
VirtualFree
RemoveDirectoryW
FindClose
lstrlenW
lstrcmpiW

glu32

gluNurbsCallback

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ