37327f7540cda65c45cf4ad02e1aa8f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37327f7540cda65c45cf4ad02e1aa8f0_JaffaCakes118
Size

124KB
MD5

37327f7540cda65c45cf4ad02e1aa8f0
SHA1

cf173596bc2d43ab1458fcd0e8369a94b6c07f6f
SHA256

b1d4a0bdd286dca401aae7fc71531427b750b98e2857e5b4dc62a6d360de7851
SHA512

edadf8aa884bab4b3a2a2f0decb361e551af1da6f4efb59f2a95baccb51c160e884f2720a097efdd54bbb19036d736c5707eb45c12264831ce14db470f278082
SSDEEP

3072:8lC22vXqPNymRUeAWus6kti6wotAA+GAP5dLCjEIue:8gfq1nEVUiz2izCjF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37327f7540cda65c45cf4ad02e1aa8f0_JaffaCakes118

Files

37327f7540cda65c45cf4ad02e1aa8f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Folava
MyhuryFafovy
Lajehogugyweju
TeBoDiwilyriry
ViXofyvowamybu
Xaqygylotufuzo

Sections

.text
Size: 1024B - Virtual size: 970B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zdata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 215B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ