37806647b96fab7b2d3d8e70d65e7780_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37806647b96fab7b2d3d8e70d65e7780_JaffaCakes118
Size

821KB
MD5

37806647b96fab7b2d3d8e70d65e7780
SHA1

bda43227a69b936bcdf2b6d64564636f2a7bb23d
SHA256

4db8e58bbe3398e9fa36b878160e36532171b3a978ed229e72dcb17fb1f77217
SHA512

1498bc7331d00ba38fca44e8e06c30dd046505d0cadaef6b463b4807f1f586aeed45c5744a4da0373a904eeb4a4b18e3443ec3370fc940f4b4d7d5e35433da93
SSDEEP

12288:La4i4XKDAEv1fvfBK4a1gBVUIXVAPdiWnUeLAEfynTLlxR6Cogs8uwHRQ6ja9PP:Ht4tvZnB1pTEfgTLlJVH7a9H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37806647b96fab7b2d3d8e70d65e7780_JaffaCakes118

Files

37806647b96fab7b2d3d8e70d65e7780_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9171a46f2e308de37b2c1df6c9ab4041

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GlobalAlloc
HeapFree
HeapAlloc
CreateFileA
ExitProcess

shell32

SHEmptyRecycleBinA

secur32

CompleteAuthToken

powrprof

GetPwrCapabilities

Exports

Exports

antiemu30

Sections

.text
Size: 812KB - Virtual size: 811KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bdd
Size: - Virtual size: 61KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 489B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ