d9a42d4edf32969d1abbd1ca4129ab71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9a42d4edf32969d1abbd1ca4129ab71_JaffaCakes118
Size

55KB
MD5

d9a42d4edf32969d1abbd1ca4129ab71
SHA1

5da8cd8d984123b97f76e5321aac6d273629969a
SHA256

2f7c9303a32aef1d3a4243e202bc0f785ad575ada41a1c39e13989df04fb5724
SHA512

7691d00ecb413ba76f0523d2306ad805c718d26d5a3352b56bf4b9c8891111dbd8ac3e259f82534d2126b9a2f94ec7ded6f8d4ea1352ab8a71d8c6095ad7deee
SSDEEP

1536:/YokShZw7ZZZZZZZZZjbs7SAQ0hHHuVcATkeZZZZZZZZjokhGZZWZZZZZfgJjBjx:gokiZw7ZZZZZZZZZjbGhHOVVT7ZZZZZW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9a42d4edf32969d1abbd1ca4129ab71_JaffaCakes118

Files

d9a42d4edf32969d1abbd1ca4129ab71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d15f1674bf29a9f4fa8de9c5e3a1f86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetCommandLineA
FindResourceA
ExitProcess
GetModuleHandleA
LoadResource
HeapAlloc

user32

DefWindowProcA
CreateWindowExA
GetDC
RegisterClassA

gdi32

ChoosePixelFormat
SetPixelFormat

opengl32

glGetLightiv
wglMakeCurrent
wglCreateContext
glLightiv

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ