2d1d522c446fabbbcfa8c3924f240ba3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d1d522c446fabbbcfa8c3924f240ba3_JaffaCakes118
Size

112KB
MD5

2d1d522c446fabbbcfa8c3924f240ba3
SHA1

6e5d2efb423111718a93cd7148e69047a05fb609
SHA256

a57cbe776107ee771d769116fd9e811ab2de7d6df7c3589d51774f7e504a6665
SHA512

f94cbe2cc14c3ed455e0c90591811faeff5235dbc013180cd3ee4daf3d3d6056b0040a49eba41ad0b5b429f7f368a24dc12d32560ef429a09ccc1d759293357b
SSDEEP

1536:WWyh6mG8lftPvSPhWJimaAR4FNjmNCB3CKtUAMUYO3QciOG+rj6UFWc:Wxh7FtX4YITFUIwszlG+rj6A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d1d522c446fabbbcfa8c3924f240ba3_JaffaCakes118

Files

2d1d522c446fabbbcfa8c3924f240ba3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5b77f58c30a24e36da19ab35d126dfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
CharNextA
GetSystemMetrics
GetDesktopWindow
TranslateMessage
GetParent

kernel32

RemoveDirectoryA
DeleteFileA
GetWindowsDirectoryA
lstrcmpiA
GetCommandLineA
lstrlenW
GetSystemTime
VirtualAlloc
GetModuleHandleA
lstrcmpA
GlobalFindAtomA
lstrcmpiW
VirtualFree
CopyFileA
RemoveDirectoryW
FindClose
lstrlenA
QueryPerformanceCounter

gdi32

RectVisible
DeleteObject
RestoreDC
CreateSolidBrush
GetClipBox
GetDeviceCaps
SetTextColor
SetStretchBltMode
GetStockObject
CreateCompatibleDC
GetObjectA
DeleteDC
CreatePalette
SelectObject
SetMapMode
SelectPalette
LineTo
GetPixel
GetTextMetricsA
SaveDC
CreateFontIndirectA

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ