37842a2bc59385713477a8c073917da4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37842a2bc59385713477a8c073917da4_JaffaCakes118
Size

25KB
MD5

37842a2bc59385713477a8c073917da4
SHA1

d999c460c318140665e7df4ab8a77d2e2dbada5d
SHA256

423f59634fba053ef322d6dc7604afb45a9e4eef5adf0ca9c49da69aad3f0fa1
SHA512

d8fa82c40d4ef51dab6cad8bc5ad67197d86822b6d72ea2a76b87884c49d1a9b5406476ffc32fe8c02396a1d0fa58922628a1008eaaad0f0121f5f0189fe5f72
SSDEEP

384:sqf1kKXyeDGOV320JF6x9cbV9/QLlB+3PW3EDd4GPSrU0p4d8:bfdSkTJ17/QLjMP0Erqed8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37842a2bc59385713477a8c073917da4_JaffaCakes118

Files

37842a2bc59385713477a8c073917da4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec7615994ad666c0433b802b1bacf4bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
ExitThread
FindResourceA
LoadResource
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
VirtualFree

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wjdkdqs
Size: - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE