37cf6cb9b079817a0e6f5ee55851c3a2_JaffaCakes118 | Triage

Sharing

General

Target

37cf6cb9b079817a0e6f5ee55851c3a2_JaffaCakes118
Size

338KB
MD5

37cf6cb9b079817a0e6f5ee55851c3a2
SHA1

24351aeffb31cfdde2decd3f9921ce60104967be
SHA256

cca6afd843e0f906160856f62db8807601b6d4a13ed78e31ab0046a41a90a33b
SHA512

9acd52a0287f2c215cb04d9137c9f4e6d0a73942e3add4cdb755c99e3c0068aa364a50ee78c29066d782efea7a3a139dc4941b22d13837178d8b275f4602b0ae
SSDEEP

6144:GUm8d76JhYzQUOQFb7z9U7RQKIYdu0V/mj7rcS6WlsQpEC:GU96JizpZO7Rv580hmj76QpZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37cf6cb9b079817a0e6f5ee55851c3a2_JaffaCakes118

Files

37cf6cb9b079817a0e6f5ee55851c3a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14149f2800333879aca31bb745b26b91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetCommandLineW
HeapAlloc
GetProcessHeap
GetCurrencyFormatA
HeapReAlloc
HeapFree
IsValidLocale
GlobalGetAtomNameW
GlobalDeleteAtom
SystemTimeToTzSpecificLocalTime
RaiseException
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetStringTypeExW
MulDiv
Sleep
GetTickCount
GetCurrentThreadId
GetVersionExA
GetUserDefaultLCID
GetCurrentProcessId

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
OleLoadPictureEx
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

user32

GetKeyState
EnableWindow
CharLowerA

msimg32

TransparentBlt

Sections

.text
Size: 226KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE