37878d250ce01bf2777a3eb6e3b8300d_JaffaCakes118 | Triage

Sharing

General

Target

37878d250ce01bf2777a3eb6e3b8300d_JaffaCakes118
Size

56KB
MD5

37878d250ce01bf2777a3eb6e3b8300d
SHA1

1b9404520c628f0d35b18a778b15dec162ebaa11
SHA256

87fc380510cecb6324db7a6ddc6477ee574426c89384471048f9c7ee2e2f04f6
SHA512

f4089fb49779289926988a98a60ae27709929436bdf23564e9545f8036a1ed42dba68a4a3c598b01b0b24ad32f5a0bc73e95fff648e7862b28b01d40b63cfc4c
SSDEEP

1536:3UAAA9IJzUEaNnumKY1pz+tVKMFj0fWLFF93DmRK:3UAAA9EwEaNbz+tYMN3DmA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37878d250ce01bf2777a3eb6e3b8300d_JaffaCakes118

Files

37878d250ce01bf2777a3eb6e3b8300d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a75067fe6c03066d67899e96f9e7dac9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFirmwareEnvironmentVariableA
GetStdHandle
SetConsoleScreenBufferSize
EnumResourceNamesA
FoldStringW
ReadConsoleOutputCharacterA
SetCriticalSectionSpinCount
GetConsoleKeyboardLayoutNameW
CreateThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE