37459d8ed0629131b9368b7f6176c855_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37459d8ed0629131b9368b7f6176c855_JaffaCakes118
Size

35KB
MD5

37459d8ed0629131b9368b7f6176c855
SHA1

de3adb4788db3c6f3eaed20de9cbdbd59add15da
SHA256

d6bc27a27d123e74fa8885e57456d2060e93b658f240186a554b2d916ff1a81a
SHA512

be5515d4085fea5e035b9685d692158cdd0c5e0f4a066985dc2275f27edbcb52b71a51115c8eda2ef245a14409d64bb287d81759dbcaeb1817c1f5a9e5af5c41
SSDEEP

768:7hkPoTG80KN2pgHt+ldEw6QvbE/9hZ+WQB2AhKZZ:NxG80KNoxE/9WvEZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37459d8ed0629131b9368b7f6176c855_JaffaCakes118

Files

37459d8ed0629131b9368b7f6176c855_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ccb1090981838bf435f899d4ec8b6866

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

??2@YAPAXI@Z
malloc
_exit
_XcptFilter
exit
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
_global_unwind2
_local_unwind2

kernel32

GetLocalTime
_lopen
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 781B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ