37196f4119a0acb08564c5e7b72383ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37196f4119a0acb08564c5e7b72383ff_JaffaCakes118
Size

39KB
MD5

37196f4119a0acb08564c5e7b72383ff
SHA1

3636e5a82adb65855a8013480a98ae58f2fff8dd
SHA256

e746f7061faa9b5f95ff4331dcc12d076a7adfed4222e25b4dea3896374d4b2c
SHA512

c1f460acffe095e35604f40fe149c840e2dcd56110a3fd8ed6428affcde3ecd05b067a3ecb204ee91a07e9f5f15eab528cab11b14f536ab6307339dcde443fba
SSDEEP

768:cvFrF4kDX/HLp3W5OhdzhTO88ZuRa73Opogovr:cNrF7XPN3W5wleZwaqpogovr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37196f4119a0acb08564c5e7b72383ff_JaffaCakes118

Files

37196f4119a0acb08564c5e7b72383ff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a6af5feb42b6c9b5b6186d97dc1cf178

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
VirtualAllocEx
CreateEventW
CreateMutexW
LoadLibraryA
GetExitCodeThread
SetEvent
TerminateThread
WaitForMultipleObjects
WaitForSingleObject
CreateThread
GetProcAddress

user32

LoadIconA

gdi32

GetStockObject

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ