291155c270b5398a8a3e674795be7175_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

291155c270b5398a8a3e674795be7175_JaffaCakes118
Size

120KB
MD5

291155c270b5398a8a3e674795be7175
SHA1

9001d67ae67e9c860a9dc8f30df8aa4de81ad04d
SHA256

23f8d872ea06f888a725ce7f20ec76ce03a2c02b146c00f5129043c0b5c33a7b
SHA512

109b4a82a10b8d85a3a7ab34826388c1726f865c7af12c944e7307645e197884bfc988395768adf5d12d8594d105bbc18e23386d9e266eb4a2565af166541154
SSDEEP

1536:NcLQbrZo2XsZ3WmA17f9AlnD8pXRW3UQi9izvklh8iAQjbXY1HQ5Z/QgTlAtxKFk:G+Fw3Wn7f9CnIBEqUvKrgsYIlAtxKuN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291155c270b5398a8a3e674795be7175_JaffaCakes118

Files

291155c270b5398a8a3e674795be7175_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2b3fc08541caa1b85ba34c0b43f7c79e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileW
ExitProcess
GlobalUnlock
GetModuleHandleA
VirtualAlloc
GlobalFree
GetVersionExA
CloseHandle
GetLocalTime
GetSystemTime
TlsAlloc
GetProcAddress
GetStartupInfoA

user32

GetClientRect
GetDC
ReleaseDC

gdi32

ChoosePixelFormat
GetObjectA
DeleteObject
CreateCompatibleDC
SetPixelFormat
SelectObject

opengl32

wglDeleteContext
wglCreateContext

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE