37886581ff877f8f0a1fa23d2735c24b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37886581ff877f8f0a1fa23d2735c24b_JaffaCakes118
Size

56KB
MD5

37886581ff877f8f0a1fa23d2735c24b
SHA1

a72b5f3c7b5b0cd09d1bc4d11720e5ea65e6fb18
SHA256

f0119d40daa95442cfef7fc3435a56fbe3053575f39fe933af18624abf110362
SHA512

9626cc05141b1d775042bbfa06a3544af4852950687d58114177bc8972219cfb151418ce8752f46dfd899cc18cce025b5665d5cb3a4f96469784ddea0b6575ec
SSDEEP

1536:3i3BSdgX6+qKW7iJZYqFfl3ZP3kgXiFthw7MWIU0dKg+q:3wSdoqKW7irRH0DFthnUd8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37886581ff877f8f0a1fa23d2735c24b_JaffaCakes118

Files

37886581ff877f8f0a1fa23d2735c24b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3aa1aef91b3cd7cec643c3cfacdb70c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateJobSet
GlobalFree
GetConsoleFontSize
CompareStringA
SetTimerQueueTimer
LoadModule
GetComputerNameW
TerminateProcess
SetFileAttributesA
OpenConsoleW
ExtendVirtualBuffer
GetSystemDefaultUILanguage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE