37948675b73a5acfc78e36a45116205d_JaffaCakes118 | Triage

Sharing

General

Target

37948675b73a5acfc78e36a45116205d_JaffaCakes118
Size

29KB
MD5

37948675b73a5acfc78e36a45116205d
SHA1

62dabf8f0a1563fe78a84be8e4200765f776f75a
SHA256

85a76547af9e8cf3847b0316aa21c10318c139b80840ec1cf294c68f8916a54b
SHA512

8207422150c4a78ef469fc2568803dc8240cefcad2e9c26d03017786d3edc97a78db3826a5e0bc23a1fdfa133f15e9e9d8159b2be39ed43c1bdcc0b187c8ded8
SSDEEP

768:e3T7D9PbM93EjgwXxTwWI9JDkIK3o54JD1eX4p8Xq:gXDBkIqWI9xkIK1D1eX4p8Xq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37948675b73a5acfc78e36a45116205d_JaffaCakes118

Files

37948675b73a5acfc78e36a45116205d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85b71e3bb05e2a6545ab9d83bd5752f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCurrentProcess
GetLastError
GetModuleHandleA
SleepEx

psapi

EnumPageFilesA

Sections

.text
Size: 768B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE