37a868fdd0081212240408eff2303660_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a868fdd0081212240408eff2303660_JaffaCakes118
Size

36KB
MD5

37a868fdd0081212240408eff2303660
SHA1

f0b7b45dc2e6806caa01a5aaaf49eb6060a7a370
SHA256

f44f176c1bc8a37fbb2a56731d6127779758a8475859393e4b4039239e626b52
SHA512

a7578a751957707d4b2103e01e1720ce132ec04f0566ecf1aebf1e894f03725b63f17d592de610ff05b4bfd684f4aeee5cf22e5479aed99119fadb73262bcebe
SSDEEP

768:Yy45uU+U5Zw0AkDSBC+VIwuS0Qg57P82xtb6:/NVV5kWmS0Qg57PNb6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a868fdd0081212240408eff2303660_JaffaCakes118

Files

37a868fdd0081212240408eff2303660_JaffaCakes118
.exe windows:1 windows x86 arch:x86

92918342bd01e3a7424bc66e90cd0e51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
PostQuitMessage
SetFocus
SendMessageA
PostMessageA
EndDialog
CreateWindowExA

kernel32

InitializeCriticalSection
GetModuleHandleA
lstrcpyA
GetModuleFileNameA
SleepEx
ReadFile
Sleep
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
GetStartupInfoA
GetTickCount
CloseHandle
LoadLibraryA
CreateFileA

crtdll

_commode_dll
_XcptFilter
_local_unwind2
_global_unwind2
_fmode_dll
_exit
__GetMainArgs
_initterm
_acmdln_dll
exit

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ