51f5356205941ac932a884d07f461cf3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51f5356205941ac932a884d07f461cf3_JaffaCakes118
Size

106KB
MD5

51f5356205941ac932a884d07f461cf3
SHA1

65c88658095ab2da1ef3b1046a4101aabf3a3a41
SHA256

b77d91c4a0a005759fce2087ab3648ce12a943ff549a5295b3b5a6d02e1dd06c
SHA512

e517a0234ed200c6d4615394aa7a7cc850ba26f347e5cb2716b865ba9dfe8829667af270ba1d57aa1534a071d4b6019e7b2b6cadffc1efd544e2bdc1b50d7dba
SSDEEP

1536:IKsuKlV6y6JmraYsF/0zNdXT4Vm5jI7Rp2UKfWhFfdvLGni6E2Cy7rwabTXh:bsuKTZ8mWY8/M4VX2saUabTx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51f5356205941ac932a884d07f461cf3_JaffaCakes118

Files

51f5356205941ac932a884d07f461cf3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

511f6b5c939ba09b8a97e1facdec3171

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

RestoreDC
GetDeviceCaps
DeleteDC
CreateFontIndirectA
GetClipBox
GetStockObject
CreatePalette
GetTextMetricsA
SelectObject
GetObjectA
DeleteObject
SetTextColor
CreateCompatibleDC
SelectPalette
SaveDC
SetMapMode
SetTextAlign
CreateSolidBrush

user32

GetSystemMetrics
CharNextA
GetDC
GetDesktopWindow
TranslateMessage
GetParent

kernel32

lstrcmpiW
QueryPerformanceCounter
lstrlenW
GetModuleHandleA
GetSystemTime
RemoveDirectoryW
FindClose
GetWindowsDirectoryA
CopyFileA
GetCommandLineA
lstrcmpA
RemoveDirectoryA
lstrlenA
lstrcmpiA
DeleteFileA
GlobalFindAtomA
VirtualAlloc
VirtualFree

glu32

gluNurbsCallback

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ