37316c09dc99382a5cf7a8ff185e812e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37316c09dc99382a5cf7a8ff185e812e_JaffaCakes118
Size

67KB
MD5

37316c09dc99382a5cf7a8ff185e812e
SHA1

bacb41e068ecb1974245736636e9eb6e4409889f
SHA256

b301c6ec59462d4f35da53e56399a34cdce7bd0399eeb2d47218d7eef39cc67c
SHA512

e10061b49f190b23e5cd40d750db4c46a6cf44bf0fc3414cbe05b1a89752285429c756d26d83b0808a260f0bf91c016b431a825b9da9e2acf430cf2cd9b52879
SSDEEP

1536:Ri+vzb7WcexHkz/ilH8Ro+9U7ZP3qoA8jB++:Rxzb7lexETil8RDU7ZP3D3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37316c09dc99382a5cf7a8ff185e812e_JaffaCakes118

Files

37316c09dc99382a5cf7a8ff185e812e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 47KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE