37a7f97c88f64988728412b8a1dd1464_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a7f97c88f64988728412b8a1dd1464_JaffaCakes118
Size

117KB
MD5

37a7f97c88f64988728412b8a1dd1464
SHA1

d54a24966e10dfba16076f406789acecb2a7b19a
SHA256

ee9e2711fda619d84df0664987a06248537b50eabcbff45ee81a06a25b6a62b1
SHA512

d34d52a83e49ee80aa6ed9c1361a55a90c3e2db91411923bcbbc291a8c24f695a2181a8634f31bb04fcb0d71c517a79aabf3dcfe9ad484478a13d3cde70c698f
SSDEEP

1536:jNjVzw0tyBjWRLGUCI5IBMfOIIRPEqB3BIYoJO2MhBYukRpVxfTb5L6UPwG+3Ywm:5p0hBiRLGU/KMfAzB3BxhGxRp3fZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a7f97c88f64988728412b8a1dd1464_JaffaCakes118

Files

37a7f97c88f64988728412b8a1dd1464_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c8c29f0dde13951f639a134aa20ba33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

WriteFile
Sleep
TerminateThread
SetFilePointer
GlobalDeleteAtom
GetLocalTime
FindFirstFileA
GetStartupInfoW
FindClose
GetSystemTimeAsFileTime
DeleteCriticalSection
CloseHandle
EnumResourceNamesA
GetLastError
SetEndOfFile
ExitProcess
LeaveCriticalSection
InitializeCriticalSection
CreateThread
ReadFile
EnterCriticalSection
LoadLibraryW

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ