37a2d16fa2748e4035f559dbacb87d1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a2d16fa2748e4035f559dbacb87d1a_JaffaCakes118
Size

18KB
MD5

37a2d16fa2748e4035f559dbacb87d1a
SHA1

2aef4796c2ada035efcc58f48df97d7d90733b1b
SHA256

0295e9041dc0164e104d3b15fc8581547d5636f7692a0dfb4886a8373afdc477
SHA512

36651bfedf5590eb7c54c651333b00357edc2938fb2915198b7d8331b50fa9f054cbd65701c63761c7f5af129e3c0d322f338ba417e57d7b9fee4c44415f6551
SSDEEP

384:Xqg5mG9jstiz7bEIivudgkx3wFOswBx76XbL3cxY/mB:Xj5mG9jdbzivudgkx3wFOsYRebLcxY0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a2d16fa2748e4035f559dbacb87d1a_JaffaCakes118

Files

37a2d16fa2748e4035f559dbacb87d1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02d9e23b61a9f3831ee1405ea08c09d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
QueryPerformanceCounter
ReadFile
SetFilePointer
CreateFileA
Sleep
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE