37490cdd6d3c22c1b20fbab99dc70d53_JaffaCakes118 | Triage

Sharing

General

Target

37490cdd6d3c22c1b20fbab99dc70d53_JaffaCakes118
Size

113KB
MD5

37490cdd6d3c22c1b20fbab99dc70d53
SHA1

149206ab175614c87ee5726e83068477bbc8ce72
SHA256

66c750cdc7973f58a491aa1c17b8c49e918998c61cac58dbab41482a574dcb12
SHA512

5fc669352a744f39fcb37554c9e753a1422ee97ee0fae17e95d792616d0b103310064c0d9a67e3fc96967aba8e576870c74777cdb42442132b412ef17118b8d0
SSDEEP

3072:THyDy9EMsiiL9/JArVJfdOHPyuUY+OsgOiw:THT9EMsRB/JEJfQrFZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37490cdd6d3c22c1b20fbab99dc70d53_JaffaCakes118

Files

37490cdd6d3c22c1b20fbab99dc70d53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28b40b78689be7e83ccca2ff02354d4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE