37b7fbd847d42b73d207e9c839a8c983_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37b7fbd847d42b73d207e9c839a8c983_JaffaCakes118
Size

94KB
MD5

37b7fbd847d42b73d207e9c839a8c983
SHA1

957594c185006dcc75046494d92efa02f57efe46
SHA256

aec1682148070e0688e8b4a9db5e924eaa6e8808ab7ebbed53fc2cc1d1d83dbb
SHA512

8726b10a04980e1b566508a2299294516d09df85ae8fcd5abc372a58d2752745998bbfa7df09ebaf26cbd686cd8be757b20b937448a7d117dc99a5e194116946
SSDEEP

1536:HoZ126bxS+sRNf9/kvG2yNHMvzovLdF2vrE80XBokteiXLHtC0CsNdyukfP:69xS+sjmvWNH+opF2ToXBoOeiXZGsNY1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37b7fbd847d42b73d207e9c839a8c983_JaffaCakes118

Files

37b7fbd847d42b73d207e9c839a8c983_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cdbab13ede5146368da44b3eb8655b63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
ExitProcess

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ