529d5fbe53871d676122a6e60a1316ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

529d5fbe53871d676122a6e60a1316ad_JaffaCakes118
Size

113KB
MD5

529d5fbe53871d676122a6e60a1316ad
SHA1

7c16193fa42d23e01adf8636783afef78e36b3f9
SHA256

a1114f26600d18df49b2e5bec1105361f6ab094e25d6e43fbf22a642bf1c922c
SHA512

02614abc1fc45bcb3f26b2a57b3a3aa498449e43c88013a66d380980536f2042241c60ec6cb7f23202401d77471aed770f06593a4a696f8080b01cc616622367
SSDEEP

1536:ZpLZu4+P5EK922HYxxPo+C0R2flQuQMNGMCELXBzHfSTH6OW3Qxs2J19IEn:PLZqv5ePC0RQlQuhNGMC0RMd19IEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
529d5fbe53871d676122a6e60a1316ad_JaffaCakes118

Files

529d5fbe53871d676122a6e60a1316ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdadddce3f6d3f2e903f204fc64234cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcmpiA
QueryPerformanceCounter
lstrcmpA
GetCommandLineA
lstrcmpiW
GetWindowsDirectoryA
lstrlenW
DeleteFileA
GetSystemTime
GlobalFindAtomA
RemoveDirectoryW
CopyFileA
FindClose
RemoveDirectoryA
VirtualAlloc
VirtualFree

gdi32

SetMapMode
CreateFontIndirectA
SetTextColor
SetStretchBltMode
LineTo
DeleteObject
GetObjectA
GetStockObject
GetPixel
RestoreDC
SetTextAlign
GetClipBox
GetTextMetricsA
GetDeviceCaps
CreateSolidBrush
DeleteDC
RectVisible
SelectPalette
CreatePalette
SelectObject
CreateCompatibleDC

user32

GetDesktopWindow
GetDC
GetParent
CharNextA
TranslateMessage
GetSystemMetrics

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ