37d6c8eb2775e6748f075e98255f7c0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37d6c8eb2775e6748f075e98255f7c0b_JaffaCakes118
Size

24KB
MD5

37d6c8eb2775e6748f075e98255f7c0b
SHA1

50fb0ef996d33e9091991cd4642f5c528241d236
SHA256

0edce32191d530bc23d32df377ecd7f4bcb67d99025476c4399deede43b2290b
SHA512

7249932bdfbb497fe81cae5d9ee6b2c530446fd8e6cad103401250934d14493805d8a35b99ccdf04fc5f1d5a336755d5f89a8b5457c7a3fbfc9a73b2343f7455
SSDEEP

192:o2aCkxHqoB7HxeCzAhKP5TAWzynUtvg5fGFC/+oDqLmqV8DjG3P1oyMq1uKQ9Z1:olDqoFH06AUP5TAQHvgYCGoDi8Du123

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d6c8eb2775e6748f075e98255f7c0b_JaffaCakes118

Files

37d6c8eb2775e6748f075e98255f7c0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a96c583b5bdeae27d9ec80cbfd0550f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
CreateProcessA
Sleep
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
FreeLibrary
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

isspace
ispunct
isprint
islower
isgraph
isdigit
isalpha
isalnum
div
ceil
isupper
rand
srand
time
__CxxFrameHandler
atol
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
strstr
_access
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
isxdigit
sprintf
_itoa

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ