37a5500fe4194b77a31b370d3091ff52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a5500fe4194b77a31b370d3091ff52_JaffaCakes118
Size

8KB
MD5

37a5500fe4194b77a31b370d3091ff52
SHA1

f45171ffdc4fa8f256fb1c3c5f570143f0dc2cb0
SHA256

2533b43625c5aef8edcb45ebdad5f24a1c8cb2ba5e472819bfd56fdae4bf2d5c
SHA512

e204a767fa82d665978d7f298f6c5aa294c1e8e1fdea6dfd44fdd034de7f2749b849619b5ad9fb131e2eb6982f968a575089e97c1c21302006c0a4dc46fbc485
SSDEEP

96:Ceb7O5NWjuhaq3j8BMFSK0lXAPXdZwD9ApPtboynInXxnPY:h8Dhah6r0EHwJKP1oynUBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a5500fe4194b77a31b370d3091ff52_JaffaCakes118

Files

37a5500fe4194b77a31b370d3091ff52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9ccf6024ac776e9358ef5aed50f5709

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
CreateThread
GetModuleHandleA
GetStartupInfoA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
strcpy
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
_initterm

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ