37f1583450261a16008e94ef76964e8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37f1583450261a16008e94ef76964e8c_JaffaCakes118
Size

80KB
MD5

37f1583450261a16008e94ef76964e8c
SHA1

a306a301088834952fc2feb88f625c235eac2709
SHA256

56aba18be77fa9f58667ff095804848fa13618b4d23570c509ba0395d09831fa
SHA512

2942ea41df77516ebcc3528dca25ed51f3e0075de946e1205480398389e0df197fe608bcea48e63393862103f7060a7b3cd8dfdb57c1d7c735484ab75d68c3bc
SSDEEP

1536:F+GV/GCk2b3V/FLzoTT1ODnP7jan0AzCwDpVHCyISnLWx:wWm2rfzcTCn5eDpVicWx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37f1583450261a16008e94ef76964e8c_JaffaCakes118

Files

37f1583450261a16008e94ef76964e8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4c5bdb336e05c65925337ef406e816b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetStringTypeA
LoadResource
GetEnvironmentVariableA
GlobalHandle
MultiByteToWideChar
GetEnvironmentStrings
lstrcpyW
SetCriticalSectionSpinCount
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetProcessHeap
CompareStringW
InterlockedExchange
LocalAlloc
GetLastError
lstrcmp
LocalFree
lstrlen
Beep

gdi32

CreatePolyPolygonRgn
AngleArc
CancelDC
CreateColorSpaceA
EngCreateBitmap

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 663B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 58B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ