37005d05913eb47e6c01d401d9f9318f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37005d05913eb47e6c01d401d9f9318f_JaffaCakes118
Size

1.3MB
MD5

37005d05913eb47e6c01d401d9f9318f
SHA1

a9cebb4d94c8d176b3ffd46dacf98ce504c53153
SHA256

abf0024efe1d79bb0ca14dbf3d0f196db2fbc205b2d0e7134d46e6cd913a0ec8
SHA512

60320b11674927abdc23c9bd7d5db520140d4d376a16dcb33b375d7932a3e8af368663a7a8f065689d4456bf8bd1deb7e326875cd6c7cf885dc4be2c16ba0ecb
SSDEEP

24576:zgE6Z9m7IQ3dgADcq0stgYaiEzWTlNFKU7QT8KewA50hv3lWKyTEXSOQEApHN:xVIQYagnqXQP4KyTOSZEApt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37005d05913eb47e6c01d401d9f9318f_JaffaCakes118

Files

37005d05913eb47e6c01d401d9f9318f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88381b84da56810b869e897e6d45bd58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

i:\build\boxedapp_src\src\boxedapp\bxpacker\obj\win32\release\dotnetappstub32\DotNetAppStub32.pdb

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

EnumChildWindows

Sections

.text
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bxpck
Size: 281KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.main
Size: 1004KB - Virtual size: 1000KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE