7486ca05ea610ad33f080dfd620a6dfb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7486ca05ea610ad33f080dfd620a6dfb_JaffaCakes118
Size

231KB
MD5

7486ca05ea610ad33f080dfd620a6dfb
SHA1

e647220ff11aa15e768be02d336f9ecc0931ef7a
SHA256

7598cc39fde4f3ec638858cfebcf424e7bb91c7e492a19d4a7c2cca6754aec49
SHA512

cad48ae7d903729f7ab93f04ecf4cd51888c7b4b05d7fb3a7efdea47445c06e4ff3d4163c82e74d286786823cf094ab444a68b2779c3e7d66e472ad84895e857
SSDEEP

6144:pKdIiMycPFIzMdOGlqUnL8hCILW5r6NdWrKqef209xRG:A6iMbtfTqUnYhWJ6bq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7486ca05ea610ad33f080dfd620a6dfb_JaffaCakes118

Files

7486ca05ea610ad33f080dfd620a6dfb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cb4b67b468ad5cdc229ba1da919a36bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
InterlockedDecrement
CreateEventA
InterlockedIncrement
CreateMutexA
CompareFileTime
GetCommandLineA
GetStartupInfoA
GetCurrentThreadId
GetStartupInfoW
TlsAlloc
GetModuleFileNameA
GetLocaleInfoA
GetSystemTime
GetModuleHandleA
GetLocalTime

user32

GetDC

gdi32

ChoosePixelFormat
DescribePixelFormat

opengl32

wglCreateContext
wglMakeCurrent
glEnable
glBlendFunc
wglDeleteContext
glLightfv

msvcrt

__dllonexit
_controlfp
_onexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
memcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ