37ede47eb4a23ce5c06e679de0c7b192_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37ede47eb4a23ce5c06e679de0c7b192_JaffaCakes118
Size

18KB
MD5

37ede47eb4a23ce5c06e679de0c7b192
SHA1

9dfadf01a217e7e52eb1aca64419355c6d7f35ab
SHA256

20bb99f539356fddc2d7fcf33a7bda4fe17e709ff0130abd77e777f4aa0569b2
SHA512

086685716eb09acbade11aea445cfa0bf77bb2c4cc57fa49875813dc379a872ab7e20312abfc3ad20522623270ab9c07eb3dad41358bf09b2bcda9ec94961ace
SSDEEP

384:mpzZ+TT9L9lCPLGSgJFEvLIb6050RCOTth3pym/7j:999lqCSW6vwrROT/fv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37ede47eb4a23ce5c06e679de0c7b192_JaffaCakes118

Files

37ede47eb4a23ce5c06e679de0c7b192_JaffaCakes118
.exe windows:4 windows x86 arch:x86

789b50c6b639585b1e54582893409628

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetMessageA

advapi32

RegEnumKeyA

Sections

.text
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ