3bfdb116b2279ff80514d1d5bd40c635_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bfdb116b2279ff80514d1d5bd40c635_JaffaCakes118
Size

108KB
MD5

3bfdb116b2279ff80514d1d5bd40c635
SHA1

2b6303be2fc28f45cc323d0064f1cb06b29e5e1f
SHA256

6853d9d7146c98e8658fb00b48600afb80f991f48efdbf5f491cb742940be274
SHA512

133290482c7620c7856e283504eef3573783b704339cb75fbd3345c2ac0bd4f32c7763ca9d87d63ad396c416bbb0adaa5667965c9af3755102a518aea4097f31
SSDEEP

1536:jP9KMWsroOMXAyjyxvaZqx/aEPIwB6CidLth1SADPWjqpXnJUg3i6Cc2xBPlnR:0bOcJ2rF6Cidxh1hbSgn2FxBPlnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bfdb116b2279ff80514d1d5bd40c635_JaffaCakes118

Files

3bfdb116b2279ff80514d1d5bd40c635_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a7c1835a1a058dfc7168ecb1d76103c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
GetDC
GetParent
CharNextA
GetDesktopWindow
TranslateMessage

gdi32

GetDeviceCaps
GetObjectA
RectVisible
LineTo
GetClipBox
CreateSolidBrush
CreatePalette
SetTextAlign
CreateCompatibleDC
SelectPalette
SaveDC
DeleteObject
SelectObject
SetMapMode
GetTextMetricsA
SetStretchBltMode
DeleteDC
SetTextColor
GetStockObject

kernel32

GetModuleHandleA
lstrcmpiA
DeleteFileA
RemoveDirectoryA
CopyFileA
lstrcmpA
GetWindowsDirectoryA
GlobalFindAtomA
RemoveDirectoryW
lstrcmpiW
FindClose
lstrlenA
GetSystemTime
lstrlenW
QueryPerformanceCounter
GetCommandLineA
VirtualAlloc
VirtualFree

glu32

gluNurbsCallback

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ