531a67466ac1fa9208fb1ab924bb5306_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

531a67466ac1fa9208fb1ab924bb5306_JaffaCakes118
Size

110KB
MD5

531a67466ac1fa9208fb1ab924bb5306
SHA1

e33019b0c8e6de59f68abdf8d485cd48e2cfd11c
SHA256

b7f9b3c6a34302f3b9c28076f28629e7979e53700ed24de9a9146b786d96b889
SHA512

087a0176182ccc2d286ef0563600ed000cdc5a6002651b31b1bc3beb8a0c7de99c093cc1ca310c77bb5a9f905d67b5c894ab369051953e6967e63316e883dca1
SSDEEP

1536:/x0nH8+CYzez3CaLwmxV5o1qvF18XfTADQQlg8rfXIciG7ssOQEdlOXW9h:pdWzwSUV/OTOhkksNOXM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
531a67466ac1fa9208fb1ab924bb5306_JaffaCakes118

Files

531a67466ac1fa9208fb1ab924bb5306_JaffaCakes118
.exe windows:4 windows x86 arch:x86

631dd259f20e57fbf4116db1fa1a1446

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
VirtualAlloc
lstrcmpA
GlobalFindAtomA
VirtualFree
GetCommandLineA
QueryPerformanceCounter
GetWindowsDirectoryA
GetModuleHandleA
lstrlenW
DeleteFileA
CopyFileA
RemoveDirectoryW
FindClose
lstrlenA
RemoveDirectoryA
GetSystemTime
lstrcmpiW

gdi32

GetClipBox
RestoreDC
RectVisible
SelectPalette
GetStockObject
GetDeviceCaps
DeleteObject
LineTo
SetMapMode
SetStretchBltMode
CreateSolidBrush
SelectObject
GetTextMetricsA
GetPixel
SetTextColor
DeleteDC
SetTextAlign
CreateCompatibleDC
SaveDC
CreatePalette

user32

GetSystemMetrics
GetDesktopWindow
TranslateMessage
GetDC
GetParent
CharNextA

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ