7629b483bf7399b51e24649079d2542f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7629b483bf7399b51e24649079d2542f_JaffaCakes118
Size

112KB
MD5

7629b483bf7399b51e24649079d2542f
SHA1

72eeb719b1ab4ac24cb7cec70775295ad1e9b927
SHA256

14c114209b66bb442aaa606bbbf42846e54569feb5d8c4d3984e5836c7a79d20
SHA512

efc38c8f84097548090d7c834cc73f1bf73c0b9a11e3024ac1c082cc4cdb0d64b1256d2edd2d96af04bedf85a9bd0b9ff911beb9c5b19df1e0b670ad4a385a83
SSDEEP

1536:lCYe6W6Ig8OxEqB/7yaT027DKJVAH994LSOXx4cfkVC3BvzSzKX:lpel0BGO98S0f8abzX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7629b483bf7399b51e24649079d2542f_JaffaCakes118

Files

7629b483bf7399b51e24649079d2542f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9af6db67b74286723b2022bde60f7bbd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
VirtualAlloc
GetStdHandle
CreateSemaphoreA
CreateMutexA
CreateEventA
GetVersionExA
GetModuleHandleA
GetLastError
GetStartupInfoA

gdi32

GetTextColor
SetTextAlign
GetTextMetricsA
AbortDoc
GetRasterizerCaps

shlwapi

PathRenameExtensionW

opengl32

wglGetCurrentDC
wglShareLists
glVertex3f
wglDeleteContext

msvcrt

_initterm
__dllonexit
_controlfp
_except_handler3
__set_app_type
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__p__fmode
__setusermatherr
_adjust_fdiv
__p__commode
_onexit

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ