36b2f469e3ce25fe2df32048e3da43d9_JaffaCakes118 | Triage

Sharing

General

Target

36b2f469e3ce25fe2df32048e3da43d9_JaffaCakes118
Size

121KB
MD5

36b2f469e3ce25fe2df32048e3da43d9
SHA1

58b5be572f87db951f5a3ccd95a3d5a25b11bc79
SHA256

6f2cd8e2701648bedbc49f2b6b4561a56a5720c2542eb7ec48eb97f97ea42dc2
SHA512

02072e4928f76f253da4de8468a4b034be836be10321d96c8e7fc9cf41e0745bcb8a230c6317d3ece7a14a1e1ae2aaff194bc2711af42128d3ed52c9b7c4ae38
SSDEEP

3072:hZncizhgX5gg8A5mkBVC5Hvdi8Hje5nC7ABj3kkbrf9udq:vfSX5gg8jkBE5PE8DYnC7ABgE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b2f469e3ce25fe2df32048e3da43d9_JaffaCakes118

Files

36b2f469e3ce25fe2df32048e3da43d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

787be8a4915e945d312abce630c2b2cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixel
SetStretchBltMode
GetDeviceCaps
GetObjectA
CreateSolidBrush
RectVisible
DeleteDC
CreatePalette
SaveDC
DeleteObject
SetMapMode
GetClipBox
SelectPalette
SelectObject
CreateFontIndirectA
LineTo
CreateCompatibleDC
RestoreDC
SetTextColor

kernel32

GetSystemTime
GetCommandLineA
lstrlenA
CopyFileA
GetWindowsDirectoryA
GetModuleHandleA
QueryPerformanceCounter
RemoveDirectoryA
lstrcmpA
DeleteFileA
GlobalFindAtomA
RemoveDirectoryW
FindClose
lstrcmpiW
lstrcmpiA
VirtualAlloc
VirtualFree

user32

GetParent
TranslateMessage
GetDC
GetDesktopWindow
CharNextA
GetSystemMetrics

glu32

gluNurbsCallback

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ