431783cc1175478bb19b23bd96fe75bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

431783cc1175478bb19b23bd96fe75bf_JaffaCakes118
Size

105KB
MD5

431783cc1175478bb19b23bd96fe75bf
SHA1

05cffeb28b6cdf521f7eb4c9c3bcc9b758a8710b
SHA256

b7ace3a67c765c7d092c43293baedf18a72229f6bad1695773cf05dc641c20ef
SHA512

2d97905c0b7a409f05a857d0b28932aad52e427b51f52e0e2ab335c4502954a9ac5072928c947c58f8236314349be13b5111bccf402d5adb1b87ff51c6afbce8
SSDEEP

1536:kqu1FGgP7RLojUAsJOtAsyRLjHG6w/9KF0YB3QZ3i6EATyhVqqIju:tQFtdLo5G0AsyROD9K1syhVqqIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
431783cc1175478bb19b23bd96fe75bf_JaffaCakes118

Files

431783cc1175478bb19b23bd96fe75bf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a432b87631c1ef81c621e3786dab338e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
lstrcmpiW
lstrlenA
GlobalFindAtomA
RemoveDirectoryW
DeleteFileA
FindClose
RemoveDirectoryA
GetSystemTime
GetWindowsDirectoryA
lstrcmpA
VirtualAlloc
GetModuleHandleA
VirtualFree
lstrlenW
GetCommandLineA
CopyFileA

user32

GetDesktopWindow
GetParent
TranslateMessage
GetDC
CharNextA
GetSystemMetrics

gdi32

SelectPalette
SetTextAlign
SelectObject
GetDeviceCaps
SetTextColor
GetClipBox
GetStockObject
GetTextMetricsA
GetObjectA
CreateCompatibleDC
LineTo
DeleteObject
SetMapMode
SaveDC
CreateSolidBrush
CreatePalette
SetStretchBltMode
CreateFontIndirectA

glu32

gluNurbsCallback

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ