37d8b64290f8a456fab5f5b93214b5d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37d8b64290f8a456fab5f5b93214b5d7_JaffaCakes118
Size

53KB
MD5

37d8b64290f8a456fab5f5b93214b5d7
SHA1

4de82b90733b09e3956d5bdc83a5dfa5f034ccea
SHA256

3c35a8f52fc08573be46322d3c80a1f73828fec8ec8d9c82a7d28b2b324067f5
SHA512

2c9542aebf660ca3fa125f4dfb86990aa50b3a98ebc8b31f686b6007c964c1aa5ae9680ba414271db216c6b8d70b8004daa7382e3ef0ee1969d9618da9064113
SSDEEP

1536:ZNkD9OrRJqpHMovXr6M0yJ2CxQ6XCe3arQ:TkxObmB7r0AxQyz3ar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d8b64290f8a456fab5f5b93214b5d7_JaffaCakes118

Files

37d8b64290f8a456fab5f5b93214b5d7_JaffaCakes118
.exe windows:1 windows x86 arch:x86

a7333743ef063a68d1d860bbdf1c328e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAlloc

Sections

.data
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE