37354b01dd9731cf2dd4f1654e4d61d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37354b01dd9731cf2dd4f1654e4d61d6_JaffaCakes118
Size

63KB
MD5

37354b01dd9731cf2dd4f1654e4d61d6
SHA1

aa4033a8bab50121ba5b3f7323dfc9ba89dff533
SHA256

25ac51232c4147cc76f134ce44d4cb24f1ad91792c4f788c191c274ecdb8d455
SHA512

78b88c441829b498b5ce4de0248d4ddeabe8628b08a44d9c6aab57fdec9e636f7caf4fcf716d9279645c5c7ac22eb1762f24309f652d9ae4a546743e45c53911
SSDEEP

768:b5R141/B1IgrBGKldDHZgG7vf0PBCkW1GthQTbXYEP7wA2naUH2Lu4ZLUWSkfMve:NRt00YBIthQvXjElH2LDZANEu58Z7R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37354b01dd9731cf2dd4f1654e4d61d6_JaffaCakes118

Files

37354b01dd9731cf2dd4f1654e4d61d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96885cc3ca0615d5453b5be30bb39775

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZOpenFileW
CreateMemoryResourceNotification
GlobalHandle
DeactivateActCtx
SetConsoleFont
GetNumberFormatW
LZClose
ResetEvent
IsBadStringPtrW
FindFirstVolumeW
GetTempPathA
CreateMemoryResourceNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE