949a3c5ca0f16a9faaf3bb4760240732_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

949a3c5ca0f16a9faaf3bb4760240732_JaffaCakes118
Size

524KB
MD5

949a3c5ca0f16a9faaf3bb4760240732
SHA1

55675fae43039fb43b7c1c0db926316a11571f09
SHA256

992da445dc224b78bf0ec5ea89783225ab18ebf2a8596a733c67485e5feda5a0
SHA512

9303e36d97cd4c4aeadbf0609f5145d766ec955099e059cfb15f5c6ff3f8ed03ed9a622794ba98515e0dc7fcfb1fb6687b9b6200c6f6e036463dd1a569cfc568
SSDEEP

6144:ElOkVVxNR6iGj5y1uAVNWAe4IkWHaZdejzdMdzNWz0OPwpReM6GmFjAY2x:yVDGjM1uLAbWCejzdMluDP2fGjAY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
949a3c5ca0f16a9faaf3bb4760240732_JaffaCakes118

Files

949a3c5ca0f16a9faaf3bb4760240732_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75e4cb765ce94b5e56b831f05d079f72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
GetCommandLineA
FindResourceA
ExitProcess
GetModuleHandleA
GetProcessHeap
HeapAlloc

user32

RegisterClassA
CreateWindowExA
GetDC
DefWindowProcA

gdi32

ChoosePixelFormat
SetPixelFormat

opengl32

wglGetCurrentDC
wglGetCurrentContext
wglShareLists
wglCreateContext
glGetLightiv
glLightiv
wglMakeCurrent

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 516KB - Virtual size: 514KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ