1549309893d935de828bbda788d8b5ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1549309893d935de828bbda788d8b5ec_JaffaCakes118
Size

109KB
MD5

1549309893d935de828bbda788d8b5ec
SHA1

4bcc53e7a705c002acd1fde2f31c3d7513a53c43
SHA256

616ac7f1ced662a96b0b46051e3ccfcef27be77e46e23dd93d4d852a207f4b3e
SHA512

8b27e36104e509d256c8d87bbe2b881ac719bf18c4e5f8003c503cc5fb138ea7d2ef8caa3c0250176079d3e668be47c7e93e780b8e091515a3b80dfc4e06ce54
SSDEEP

1536:t3BwOev/ZNlzV1j403NtkV33BtyOZQloulKJb9179Q94e9fi6S6WUx9l0AR3P:t3WOMPlp+YslLpGJE/UN9l0Ah

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1549309893d935de828bbda788d8b5ec_JaffaCakes118

Files

1549309893d935de828bbda788d8b5ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

090f45d7d757dd033735b098a3708ac1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
DeleteFileA
lstrlenA
QueryPerformanceCounter
GlobalFindAtomA
GetSystemTime
RemoveDirectoryA
CopyFileA
lstrcmpiA
VirtualAlloc
lstrlenW
GetWindowsDirectoryA
GetModuleHandleA
VirtualFree
lstrcmpiW
lstrcmpA
RemoveDirectoryW
FindClose

gdi32

CreateSolidBrush
RectVisible
GetDeviceCaps
DeleteDC
SetTextColor
LineTo
DeleteObject
SetTextAlign
SetStretchBltMode
CreateCompatibleDC
GetClipBox
GetObjectA
GetTextMetricsA
CreatePalette
RestoreDC
CreateFontIndirectA
GetStockObject
SaveDC

user32

GetDC
GetParent
TranslateMessage
CharNextA
GetSystemMetrics
GetDesktopWindow

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ