37d59609bf3956c2699e92ace65bca08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37d59609bf3956c2699e92ace65bca08_JaffaCakes118
Size

108KB
MD5

37d59609bf3956c2699e92ace65bca08
SHA1

a3e4593a17934f73e8f5cec82bb33d3416aab129
SHA256

0967ff5873a6cb88cd430e163c9d91cc9c6612bbce1afdb16a5ea49bff84d795
SHA512

4173e4007e86e76315444b1520a963182e8039ac59ff7549b71a1d14bbe503defa2b73a8d906741573e895f4afad3a898f02bee192a0099508592ccf56b490a5
SSDEEP

1536:iWV2v90YjhY9oChHa3GKVE283gorvb0ziNCsLsqa35ahroValURDoq4OZZZLlCIS:t2LjQhWGT283gao+NDszAtofRD68wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d59609bf3956c2699e92ace65bca08_JaffaCakes118

Files

37d59609bf3956c2699e92ace65bca08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f709be02dd0bdb9d7bd02e0053605657

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyExA
RegCreateKeyW
RegEnumKeyExW
RegCreateKeyExA
RegQueryValueA
RegEnumValueW
RegEnumKeyA

comctl32

ImageList_LoadImageW
CreateStatusWindowW
ImageList_LoadImageA
DrawStatusText
ImageList_Destroy
CreateToolbar

gdi32

ExcludeClipRect
ExtTextOutA
CreatePenIndirect

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 29B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 618B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ