37d13c246e50cfe81d4b5bdaf5ed5a4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37d13c246e50cfe81d4b5bdaf5ed5a4d_JaffaCakes118
Size

5KB
MD5

37d13c246e50cfe81d4b5bdaf5ed5a4d
SHA1

dc47578699a419f300bd89467d971e7bd8b37394
SHA256

daf40796ff10b681edab963fd55d700e95b646bebf4e527251afd86470626705
SHA512

f09ce925e797de31b6526964bbc5ebb594bfc02df7a2e1470ff4ee44dcfde7f4ed5ea5c334807d730e8ae165a50e5ff87dce2efaa6a30a7dd2d3f8208b83f4f7
SSDEEP

96:q1AXWolzCb2XM5dRWoH0PpM3B90tH0oIv6xmi:0AXh8TRH0RGBQBIvMmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d13c246e50cfe81d4b5bdaf5ed5a4d_JaffaCakes118

Files

37d13c246e50cfe81d4b5bdaf5ed5a4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

139593d7058fb9e04fbe6eaaf31e7b6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
lstrcatA
lstrcpyA
WaitForSingleObject
GetModuleFileNameW
CreateToolhelp32Snapshot
Process32First
CloseHandle
GetProcessHeap
WideCharToMultiByte
SetFileAttributesA
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
SetEvent
CreateThread
GetProcAddress
ExitThread
CompareStringA

user32

BeginPaint
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE