fb8e62c341232709d096862b1b74a061_JaffaCakes118 | Triage

Sharing

General

Target

fb8e62c341232709d096862b1b74a061_JaffaCakes118
Size

203KB
MD5

fb8e62c341232709d096862b1b74a061
SHA1

db96d063aa33027d5b373d958e35c00e82c643d0
SHA256

d8917ac2b1b853c38c1b1e4b649ad8a3ce9bfc941842e408f2b7dd4088e10b5e
SHA512

85dfb8303c9980c6c57e645d74ba0e25c8a4f5ee478e885ca3a9544eeed7746342850dc3fec7f60c777c8421f9e3ea3859320c12996ccb520b0ff59bc77d151d
SSDEEP

3072:Rb16jvirb4LQbA34Dk2A/1DjF6du/y400/IgS/tPTcSNFPep+:516SA34DkFKCvwgS/GSfGp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8e62c341232709d096862b1b74a061_JaffaCakes118

Files

fb8e62c341232709d096862b1b74a061_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7b5e51b32cbb5b4d499e0b87d5e979d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glRectdv
glCopyTexSubImage1D
glRasterPos3sv
glLogicOp
glTexImage1D
glPolygonMode
glEdgeFlagPointer
glPushName
glReadBuffer
glColor4d
glColor3s
glFogi
glColor3sv
glTexCoord4dv
glEvalCoord1f

glu32

gluEndTrim
gluTessVertex
gluDeleteTess
gluTessCallback
gluScaleImage
gluPerspective

ole32

OleCreateEmbeddingHelper
RevokeDragDrop

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_exit
_XcptFilter
exit

kernel32

VirtualAlloc
GetProcAddress
GetModuleHandleA
GetStartupInfoA
ExitProcess

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 371KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ