3b5e750bcd12d654e841e50c7e14c0c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b5e750bcd12d654e841e50c7e14c0c9_JaffaCakes118
Size

20KB
MD5

3b5e750bcd12d654e841e50c7e14c0c9
SHA1

8ade4f343623680228db46147173281625f4897a
SHA256

ef334be8c912596b00f629677c79f3b3a04bb8c23e3ebb3baf8cdb8bc12cbcb8
SHA512

0649ea515bfd74aca185e693eb619dcc059391c965ff6c5b4ca04d145d51dbd2bfaaf7b840e6ea44e52ff939e6aa132a7f63f4fa8a1f8fedefd66000ba48197c
SSDEEP

192:+huCzBZC8Z9hxpKLbIYuY3tnRtP2o+gXE9I/hga52d:+kCzpPpKHIYu6tnF+gsI/k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b5e750bcd12d654e841e50c7e14c0c9_JaffaCakes118

Files

3b5e750bcd12d654e841e50c7e14c0c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d54b0f778b16767b0bd4483743c6c9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
GetCommandLineA
FindResourceA
ExitProcess
GetModuleHandleA
GetProcessHeap
HeapAlloc

user32

RegisterClassA
CreateWindowExA
GetDC
DefWindowProcA

gdi32

ChoosePixelFormat
SetPixelFormat

opengl32

glLightiv
wglMakeCurrent
wglGetProcAddress
wglCreateContext
glGetLightiv

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ