37e13b022161283533d7a433c9b2558f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37e13b022161283533d7a433c9b2558f_JaffaCakes118
Size

93KB
MD5

37e13b022161283533d7a433c9b2558f
SHA1

47e6c78c5aee90e4c740488f90adac938ebfcf6b
SHA256

5f8f2b7299766bdba1cd3da4005a994f7ecc3ae70f74b74f1ea9d8844b65cf05
SHA512

86a8639a121e80aba18f50ffb3db05d0b4edafe9a3a6c4566bc696d2451996613dbed85db18bdb3ff7fb3496bc205fdf91d4ed2a60b2102c74942b5e3f085c31
SSDEEP

1536:PxG6qsKyU7O5uPpQOSHFE8XvPF4Hvb8OHR9yOa9F3sfQQJcGFaWqsfPxL6akDgNF:PxG6yyU7OzO6Mb3HRq9mTkWqsBtUWbX0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37e13b022161283533d7a433c9b2558f_JaffaCakes118

Files

37e13b022161283533d7a433c9b2558f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d107b47a6994fe2d14e9e2821296c08c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
UnmapViewOfFile
WriteFile
lstrcatA
lstrlenA
ExitProcess

Sections

.sforce3
Size: 25KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ