37557a65a8dfc80cb38a4ac03f5ff0dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37557a65a8dfc80cb38a4ac03f5ff0dd_JaffaCakes118
Size

25KB
MD5

37557a65a8dfc80cb38a4ac03f5ff0dd
SHA1

ce6cd43bb505aa6a4f3b4306a5e490034bb2523b
SHA256

f00ac3a36ec7593ad81a72a03f1feb503fb83451c7b1c96e7d2be27b69e69987
SHA512

5dd3c6d72c9db4ec23841c5eddae8894777710a4e0d3359f511b73c3adda63151a73ff5e186c9b1fc87c802673de201b2e870fb405c35b3f9fb267d505d1abfa
SSDEEP

768:qDMt+OJJryAc+l20fcYEfj8XnPOPhyqVR2C:qAt+OKCXPHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37557a65a8dfc80cb38a4ac03f5ff0dd_JaffaCakes118

Files

37557a65a8dfc80cb38a4ac03f5ff0dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE