2a9f159180037ff2e42ccef057ddc842_JaffaCakes118 | Triage

Sharing

General

Target

2a9f159180037ff2e42ccef057ddc842_JaffaCakes118
Size

108KB
MD5

2a9f159180037ff2e42ccef057ddc842
SHA1

66d75632f8f16bf34538755d155e7b1bc09faeb7
SHA256

6c9e5202bec2289f3dda75345ab3cd14162673425942969f372eb065fd67b78d
SHA512

0fe58674e75528f1c4ba4d07032608d4ea5f5ad3fd2935a678884a771a0da773a3179a62f6750f81d96a0f0fe0787d85013f53760677d33f9e8669620b887b2b
SSDEEP

3072:CAWoLR6X0CLAyha/CUlJv5IymWE2kfM6DZg9:CILYXoogE/fN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a9f159180037ff2e42ccef057ddc842_JaffaCakes118

Files

2a9f159180037ff2e42ccef057ddc842_JaffaCakes118
.exe windows:5 windows x86 arch:x86

87f784b361e656055b34688e5c19618d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
GetParent
GetSystemMetrics
TranslateMessage
CharNextA
GetDesktopWindow

kernel32

DeleteFileA
GetSystemTime
GetWindowsDirectoryA
GlobalFindAtomA
lstrlenA
CopyFileA
lstrcmpiW
GetModuleHandleA
QueryPerformanceCounter
RemoveDirectoryA
RemoveDirectoryW
FindClose
lstrcmpiA
lstrcmpA
GetCommandLineA
lstrlenW
VirtualAlloc
VirtualFree

gdi32

RectVisible
RestoreDC
SaveDC
SetStretchBltMode
GetClipBox
CreateSolidBrush
GetStockObject
SetMapMode
LineTo
SetTextAlign
CreateFontIndirectA
GetTextMetricsA
SelectObject
DeleteDC
GetDeviceCaps
DeleteObject
SelectPalette
CreatePalette
GetObjectA
GetPixel

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ