37d5e06e78b6e2cd25bf3befa11e8a72_JaffaCakes118 | Triage

Sharing

General

Target

37d5e06e78b6e2cd25bf3befa11e8a72_JaffaCakes118
Size

22KB
MD5

37d5e06e78b6e2cd25bf3befa11e8a72
SHA1

f3417548753dab655ed1007de34f4748e144879d
SHA256

914cb2c4980e83aa264ea4a9bbc2c847cefae103c40b4417d7a5f32f932687ad
SHA512

b747b8ca8806d8fb40b6e955ebb090bdfcd5fe6fea24f015fd71814431390687888b341cb37b8056130083f1df2a3260fd2eb2709d3d2da3c819c9dea82fc9dd
SSDEEP

384:IPboSLb16t3H1d26TzbffFatBan61XLI1DVwUQYjwiok1GYXYeAPuwDGPjp:IbXa5b3FqPkJwiooGqY1PBGN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d5e06e78b6e2cd25bf3befa11e8a72_JaffaCakes118

Files

37d5e06e78b6e2cd25bf3befa11e8a72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a9fa8da93ccadd3963af81e94fca004

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterWindowMessageA
FindWindowA
SendMessageA

ole32

OleDraw

oledlg

ord4

msvcrt

exit
_acmdln
__getmainargs
_XcptFilter
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_initterm

kernel32

GetStartupInfoA
ExitProcess
GetProcAddress
GetModuleHandleA
HeapValidate
GlobalFlags
GetCPInfoExA
CreateEventA
OpenEventA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 846B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 271KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

huuund
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ