10154bb1b99461ac893600767960f757_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10154bb1b99461ac893600767960f757_JaffaCakes118
Size

114KB
MD5

10154bb1b99461ac893600767960f757
SHA1

0695c3f80cfb0e91eadce55fc22c6e05f0104574
SHA256

6a06f240e0ce781dcefd5a7108e2f2bca7c420a5ed4b9d48e0d445f3d4c1c7a8
SHA512

0698561dd4eb9a91b7c9b14a4c911a14d40db1a702e42f229cf0bcab16b88aea02dac2cd9e8b0196797eed679ee1dfc1a122268ff77338600a153aeeaddbe898
SSDEEP

1536:Z2kAN2O9g9TGlbcbYhMSmsGXR3nMtqBWEdRBopnGyxJHJC37b+t2UxgOlcBk6Eua:Yk82OCLW4sEMgsnFJHJCLSIEZsxqpt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10154bb1b99461ac893600767960f757_JaffaCakes118

Files

10154bb1b99461ac893600767960f757_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2863c4c3d90fd2ed396599e7c10112f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
lstrcmpiA
DeleteFileA
lstrlenA
QueryPerformanceCounter
lstrcmpA
GetModuleHandleA
GetSystemTime
GlobalFindAtomA
lstrcmpiW
lstrlenW
GetWindowsDirectoryA
RemoveDirectoryA
GetCommandLineA
RemoveDirectoryW
FindClose
VirtualAlloc
VirtualFree

gdi32

DeleteDC
DeleteObject
GetDeviceCaps
GetTextMetricsA
SelectPalette
SetTextAlign
CreatePalette
SaveDC
RectVisible
GetPixel
GetStockObject
GetClipBox
RestoreDC
CreateCompatibleDC
SelectObject
CreateSolidBrush
SetTextColor
SetStretchBltMode
GetObjectA

user32

GetParent
GetSystemMetrics
GetDesktopWindow
GetDC
CharNextA
TranslateMessage

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ