37a4a84006a512d2cf7415c62e57b9b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a4a84006a512d2cf7415c62e57b9b0_JaffaCakes118
Size

139KB
MD5

37a4a84006a512d2cf7415c62e57b9b0
SHA1

6b88ec4bc9066adc878fa8be8ad40e6108047757
SHA256

b4f4f80abf41c74af90a581d0d5c24d3da22d0b1f776351016f11216a24e0da7
SHA512

63224d4087b0c7e03c343bfa82f331b452c8971e599a2a8b8dd1eb38af0229b1a5e1438663c764df5beff65b10b64e9b13b18dfcbfa2861e2f56fd445989967c
SSDEEP

1536:q1oeZ731El56D/GhGTvJKyAfklA3iHgEHiJSywsU/edhZKz/U8+UQyEKCUNrHPh6:soeF1ElKuhEaXiAEHo45ekTEFjKHPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a4a84006a512d2cf7415c62e57b9b0_JaffaCakes118

Files

37a4a84006a512d2cf7415c62e57b9b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d70e728636ffea8ce69ab68cc4d97f3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
AddConsoleAliasA
InitializeSListHead
GetLocalTime
FindNextFileW
GetConsoleKeyboardLayoutNameA
CancelTimerQueueTimer
ReadConsoleOutputAttribute
GlobalGetAtomNameA
OpenMutexW
InitializeSListHead

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 83KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE