3d88f658f4622271da29e18ab4ca949f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d88f658f4622271da29e18ab4ca949f_JaffaCakes118
Size

109KB
MD5

3d88f658f4622271da29e18ab4ca949f
SHA1

b4a0ee505613d58f8875d06f0adcf617f6e8736d
SHA256

39d6358168db25235a1062e805a934fbcc3c6b10b8eebd70497f9ab18d497008
SHA512

62f56549cca354a0844c2a197a3385834c4f303eafc7b340c8ff019c9946194b900548491838770df5a3c865f404ea386cf7527746a3bd7851b162a68800ef50
SSDEEP

3072:E4KCI1FW1ouEgtmcQe2MGbsBAVsSPyQobQ:E4KMm5Z/MjC/KQU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d88f658f4622271da29e18ab4ca949f_JaffaCakes118

Files

3d88f658f4622271da29e18ab4ca949f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

71bf43fa95d1ada36adc33ab602942a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
TlsAlloc
GetSystemTime
GetVersionExA
VirtualAlloc
ExitProcess
GetProcAddress
GetModuleHandleA
GetLastError
GetShortPathNameA
GetStartupInfoA

opengl32

wglDeleteContext
wglCreateContext
wglGetCurrentContext

msvcrt

memset
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_except_handler3
_c_exit

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ