37532cf8af70102de592c292b2a6bd76_JaffaCakes118 | Triage

Sharing

General

Target

37532cf8af70102de592c292b2a6bd76_JaffaCakes118
Size

4.0MB
MD5

37532cf8af70102de592c292b2a6bd76
SHA1

5ba072eeba22c0329c1c166462588a38549d6fe2
SHA256

7e026e49049e2d8e1847c91d762d7cfc5370a5b7b1d36e7a9fc46ae6d92107f3
SHA512

ff6ee7e2928cfd51e4a1fc5a4954ce5bf60fbb75195f884dee632624930c6f145fa7bdf1e57a522d6a7748e3f32f900854e057e21a2f5d911942930dc2f96e43
SSDEEP

98304:0+v5gqy7XODWOWTP6maZ+ghrcTJuwH2Fw0alYE0y0l1S+Mju4DS6H4Lj:Hvaq2zkCue2FwH+RvS+Mju76mj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37532cf8af70102de592c292b2a6bd76_JaffaCakes118

Files

37532cf8af70102de592c292b2a6bd76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37ad55bbabdb5ac07ba2b40b25ef6a7c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

Sections

.text
Size: 45KB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE