530b38bccb92065450c07058a1e16a52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

530b38bccb92065450c07058a1e16a52_JaffaCakes118
Size

113KB
MD5

530b38bccb92065450c07058a1e16a52
SHA1

b3da8698c0c54e02c61710acd0c1f9fce782a72b
SHA256

a0df400597e25c4f500600eac17f62afaca9e7280e27f87a3e2db444f4220acf
SHA512

0a5f88087aba9db13e58321f2387020ea8ac5e681a553f804ab247d2cc0f49fee2f504d8a4a446f35064ebd1418153b428dc41847e1d74dcfccec4caaaa92251
SSDEEP

1536:imWXWoapid/9Xe7WrrBCHkdSTHhmVZWGN694Vrekw/xwNSWK8Zge6ESL6dZsyzl0:i+o3/TrcTsZ+4W/xpWBsyzlpOz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
530b38bccb92065450c07058a1e16a52_JaffaCakes118

Files

530b38bccb92065450c07058a1e16a52_JaffaCakes118
.exe windows:5 windows x86 arch:x86

48973362a0f75746b00cb0543d9fc307

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
RemoveDirectoryA
DeleteFileA
GetSystemTime
CopyFileA
GetCommandLineA
GlobalFindAtomA
lstrcmpA
lstrcmpiA
GetWindowsDirectoryA
RemoveDirectoryW
lstrlenA
FindClose
GetModuleHandleA
QueryPerformanceCounter
lstrlenW
VirtualAlloc
VirtualFree

gdi32

GetObjectA
SelectPalette
SetStretchBltMode
DeleteDC
DeleteObject
CreatePalette
CreateCompatibleDC
SetTextColor
GetClipBox
LineTo
SetMapMode
CreateSolidBrush
SelectObject
RestoreDC
GetStockObject
SetTextAlign
CreateFontIndirectA
GetTextMetricsA
SaveDC
RectVisible

user32

TranslateMessage
CharNextA
GetParent
GetDesktopWindow
GetDC
GetSystemMetrics

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ