37434b2316d3e3a68f317e9bc347366b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37434b2316d3e3a68f317e9bc347366b_JaffaCakes118
Size

95KB
MD5

37434b2316d3e3a68f317e9bc347366b
SHA1

60b536bc07be511b074a5b49d8af017ba592dcee
SHA256

d656f0eb73707870e129a18cdc02605b74cf80fa8d28a06bd9cb5396d25ca0af
SHA512

c5efba5e82cf53a604305203533e493ecc63e7771657e2ed7051b93b3a536cc7daffbb0af5cb99752b0f0a939609ba92c5aaece00dfb1e1cf2c2ddb2e7bb7719
SSDEEP

1536:D7pYnkVuFOH8GEYF47phZSIXsGbi8QxXCjmgzRLI08MluX0tR2wQ+lV0A/4i4UMF:DciOFSesz8KXCSg1spMe0tR2wQeaACZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37434b2316d3e3a68f317e9bc347366b_JaffaCakes118

Files

37434b2316d3e3a68f317e9bc347366b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f2d5194f358aa2316f6b431288f4086

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
LoadResource
GetLastError
lstrcpyA
lstrcatA
GetCurrentDirectoryA
GetEnvironmentVariableA
GetStartupInfoA

user32

DialogBoxParamA

msvcrt

_initterm
memset
memcpy
strcat
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
free
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ