55d03294c03f0cf3bcd4fe0bce5b4906_JaffaCakes118 | Triage

Sharing

General

Target

55d03294c03f0cf3bcd4fe0bce5b4906_JaffaCakes118
Size

110KB
MD5

55d03294c03f0cf3bcd4fe0bce5b4906
SHA1

a9cb3d7c9d66b1573a8dd14acbb60bdeebd1a56b
SHA256

6c6f842e99e3131e7d1cb1185b39d23cd0da01d6cc08f9ca5ce8496122a57f9c
SHA512

58069a3393779a296c630eccb599006869fcefa312d42b3207ad155350876d19715330b7c3e4ef2f77de07ae7bdee9224a304e69132b481935bcae9eae839c06
SSDEEP

3072:sdya24SB/cwHdxwgOMKIwEP10GMSf81uImKD:74SndxTO+wEPmG9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55d03294c03f0cf3bcd4fe0bce5b4906_JaffaCakes118

Files

55d03294c03f0cf3bcd4fe0bce5b4906_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7c18f91cc8188d80203c01fa2944010

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
lstrlenW
GlobalFindAtomA
QueryPerformanceCounter
lstrcmpA
CopyFileA
DeleteFileA
GetWindowsDirectoryA
lstrlenA
GetModuleHandleA
RemoveDirectoryW
FindClose
RemoveDirectoryA
lstrcmpiA
lstrcmpiW
GetSystemTime
VirtualAlloc
VirtualFree

gdi32

CreatePalette
CreateCompatibleDC
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateFontIndirectA
GetObjectA
GetClipBox
RectVisible
SelectPalette
SetMapMode
LineTo
CreateSolidBrush
SetTextColor
DeleteObject
GetTextMetricsA
SetTextAlign
GetDeviceCaps
GetPixel
GetStockObject

user32

TranslateMessage
CharNextA
GetDesktopWindow
GetParent
GetDC
GetSystemMetrics

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ