37c8016cf011d90c567b6029878f80b9_JaffaCakes118 | Triage

Sharing

General

Target

37c8016cf011d90c567b6029878f80b9_JaffaCakes118
Size

38KB
MD5

37c8016cf011d90c567b6029878f80b9
SHA1

dfbd2d51d790d10732d46fe4d95744709103d202
SHA256

a717b07abca2c1b6243fd63e7e910dc4546742e0ebf1e9e0938e2b7d271ac48c
SHA512

addddbcb81fded27cf738b5fc2d6327671aa5752650e9dc7f9aebd8d6d9698cdf90aa0141856ad091174ab0ec4da02fc55671805aadda2b9ad9dd4f3953252bd
SSDEEP

768:DrHUpY4A7xasPuugwW2tSf51SX7tUZ1SH0CcimZPuV:n0t0a+gv2tSf51SX7tvUYsPa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37c8016cf011d90c567b6029878f80b9_JaffaCakes118

Files

37c8016cf011d90c567b6029878f80b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d45a2db2797a73556dda33f903e00e06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualFree
GetLastError
ExitProcess
VirtualAlloc
GetVersion
CloseHandle

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE