31d26c52861149ccfa7c419511c1c644_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31d26c52861149ccfa7c419511c1c644_JaffaCakes118
Size

232KB
MD5

31d26c52861149ccfa7c419511c1c644
SHA1

f8e9da632c043e293483be359192ea48084a1662
SHA256

7077c8a56e30ed8df0ad867d9919eb96d91e083322d6d23cc304a3cb94d20686
SHA512

cfddd150e14c2e97621aa5598b3b86b037302d68e4b244fc0b23e002d1be6c33e8f5ce51aeb39e75478d1a9954359cde2e8448644e5620a775cab8d8430d14d5
SSDEEP

6144:w64K5n66++Ym47ZjfC/MN3L0MiRQjyBjir71ATeTkaoxj0:wZKM6l47ZjfC/MN3LiRQjylw71ATJaO0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31d26c52861149ccfa7c419511c1c644_JaffaCakes118

Files

31d26c52861149ccfa7c419511c1c644_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c0a8f07054adffb87c3b0497c4c7efb2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
QueryPerformanceCounter
GetCurrentThread
GetProcAddress
GetModuleFileNameW
GetModuleFileNameA
GetStartupInfoA
GetStartupInfoW
GetCurrentDirectoryA
GetModuleHandleA
GetCurrentProcess
GetCurrentThreadId
GetCommandLineA
GetLocaleInfoW
InterlockedDecrement
CreateEventA
IsValidCodePage
CompareFileTime

user32

GetDC

gdi32

ChoosePixelFormat
SetPixelFormat

opengl32

glLoadIdentity
glOrtho
wglCreateContext
wglMakeCurrent
glEnable
glBegin
glVertex2f
glLightfv
wglDeleteContext
glEnd

msvcrt

__dllonexit
_controlfp
_except_handler3
_onexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
memcpy
_exit
_XcptFilter
exit

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ