37f566056769792d99288358f46f5f3b_JaffaCakes118 | Triage

Sharing

General

Target

37f566056769792d99288358f46f5f3b_JaffaCakes118
Size

86KB
MD5

37f566056769792d99288358f46f5f3b
SHA1

7defc49df82dfe165d9d660a8da127a49876ba09
SHA256

3981b0cb2da8ee0b217ee34e9811d586aa29c74b28d98df75205aa59261ba3dd
SHA512

9902cf6763fcb311242c77644315e43e6368b91e54d69740d35173242280d65a592ee01776c16fb7caa7ab5100043de4294498e0232c015c9d38ad81f2ca030a
SSDEEP

1536:reZqehrhffpTWZbsS874q8Ja/SMVYpK/1ZhtdQL64cWkL:reBhrSbMd8Ja/PX/1pds64Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37f566056769792d99288358f46f5f3b_JaffaCakes118

Files

37f566056769792d99288358f46f5f3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d11261ae7b4154144515ad9951c0324f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
WriteFile
SetEndOfFile
GetTickCount
IsValidLocale
WriteConsoleW
GetLastError
ExitThread
SetErrorMode
DeleteFileA
TlsFree
GetCurrentDirectoryA
InterlockedIncrement
HeapFree

msvcrt

strncmp
rand
atol

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ