0c23e4246816fee0a216a4a2cd03b5cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c23e4246816fee0a216a4a2cd03b5cf_JaffaCakes118
Size

107KB
MD5

0c23e4246816fee0a216a4a2cd03b5cf
SHA1

d38b8424cb9803d88c02a1a8bd9d7100be61497c
SHA256

63bdec28fee96028a5bf4f2af5cba2b4671765abb240180d72384f58e3e9e097
SHA512

78dd644bd588368261d06413d4cc440144672ad4c3a8b684b157139224923a75aef9f7e34c7a06cc1b5ec6ad788fae968a4444dd0c7baa1aea8b8769de8cb937
SSDEEP

1536:wVdBcGheTpyG0WTPerHYVTjycGF5wAQL4F+aTG4pSyCOtd7vF3i6KxdHJU98ABR:wZYT2MVvyTcLo+aTeyCOtxMJU98A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c23e4246816fee0a216a4a2cd03b5cf_JaffaCakes118

Files

0c23e4246816fee0a216a4a2cd03b5cf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1268ecb678ea28b17c63080b032e5266

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
lstrlenW
DeleteFileA
GetCommandLineA
CopyFileA
GetSystemTime
lstrcmpA
VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcmpiW
VirtualFree
GlobalFindAtomA
lstrcmpiA
RemoveDirectoryW
FindClose
GetModuleHandleA

user32

GetParent
GetSystemMetrics
GetDesktopWindow
GetDC
TranslateMessage
CharNextA

gdi32

SetTextAlign
GetObjectA
CreateCompatibleDC
CreateSolidBrush
LineTo
DeleteObject
CreatePalette
DeleteDC
SelectPalette
SaveDC
SetStretchBltMode
SetMapMode
GetDeviceCaps
RectVisible
GetTextMetricsA
SetTextColor
SelectObject
CreateFontIndirectA
GetPixel
GetClipBox

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ