37b35f0992e1b08f9ff65d61572fc735_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37b35f0992e1b08f9ff65d61572fc735_JaffaCakes118
Size

101KB
MD5

37b35f0992e1b08f9ff65d61572fc735
SHA1

ee4842a380052c18c2c6d6bfcd10a5f2bd101314
SHA256

97ed985054b987f3ec4738c0b70174992894acbc97ab9a92e53da973352d7d5c
SHA512

c45743ad37a0ee490816091eb17b6f888b3dde39d521bf77fc2e1e605b8739499484ade62ae5805fce92de1bc1dbe724479a05d22800a6ed063c8b126062df19
SSDEEP

3072:EukmmhRrnqDo+lIn6B6MNa+uhEhh9zT0onlaHF:7eek+qn6B64p8mlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37b35f0992e1b08f9ff65d61572fc735_JaffaCakes118

Files

37b35f0992e1b08f9ff65d61572fc735_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8eb28d2cdfafffd53ddc552118e4b75f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
GetCommandLineA
GetCurrentProcessId
GetDateFormatA
GetOEMCP
GetStringTypeW
GlobalAddAtomA
HeapAlloc
HeapCreate
HeapDestroy
InterlockedExchange
LocalReAlloc
SetErrorMode
SetHandleCount
UnhandledExceptionFilter
UpdateResourceA
WritePrivateProfileStringA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenW

user32

EmptyClipboard
GetClassInfoA
GetLastActivePopup
GetSysColorBrush
GetSystemMetrics
IsWindowVisible
LoadCursorA
ModifyMenuA
PostQuitMessage
SetTimer
TabbedTextOutA
ValidateRect

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 803B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ