37853f9357db776e1a9ad4c448d0bcc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37853f9357db776e1a9ad4c448d0bcc5_JaffaCakes118
Size

60KB
MD5

37853f9357db776e1a9ad4c448d0bcc5
SHA1

8a31ae34027a9726e3fd41ad0307c42fc3f6d36a
SHA256

bd0034ee0d88bba4a0b1ca5709d49b3d9bc88434a7d2a82438a5f1e0a2c3d457
SHA512

efe1388789686f779670982e4ab6db889f364dc5a2442acf356494b1080548204ffe0f7aadde7d0fed5ceb762802226c6c2652bc585859f201edefc546a843c4
SSDEEP

1536:BtbVEPhglzbWvC3QlmTXSlcrzvFtzF3e+fzKKs8G0NblEwcE1SC8+0:Xb5l/HICvF7eSZfBt9wP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37853f9357db776e1a9ad4c448d0bcc5_JaffaCakes118

Files

37853f9357db776e1a9ad4c448d0bcc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a775901ce675a708f07ed254ed3b3b00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32First
EnumResourceTypesA
FindAtomW
DeleteAtom
CreateFileMappingW
SetNamedPipeHandleState
GetProfileIntA
FatalAppExitW
CopyFileA
ReadFileScatter
FlushFileBuffers
Heap32ListFirst

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE