37b6453f03e07822570c957968ec2ea6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37b6453f03e07822570c957968ec2ea6_JaffaCakes118
Size

168KB
MD5

37b6453f03e07822570c957968ec2ea6
SHA1

fd8c1aa0683efc39474f02841ff14bf155b70336
SHA256

afb0382136db8b0799cd9fdbef613294bc33e12d8cc66afb6a2e036a5c50e3dc
SHA512

c55790c1865b488ccc7c15be8cd55c6ef20a3d5ced5be07374bdbfe65cc5ffcab30bc060b2f29eccf8c0c5ea2ac8bca115907eeb3e19b7df0c6ed13aea82766b
SSDEEP

3072:BKbOCNrakyUSPd8CLc5hNMNhtV3530QtEpcSGVqX/15aZHA5:o5NFSPd8Rbq3p39S15

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37b6453f03e07822570c957968ec2ea6_JaffaCakes118

Files

37b6453f03e07822570c957968ec2ea6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e6f65b814f6c18f58a853caec15c47b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

kernel32

PrivCopyFileExW
MapViewOfFile
GetProcessId
CreateFileMappingA
EnumResourceTypesA
ExitProcess
DeleteAtom
AddAtomW
ProcessIdToSessionId

user32

CreateWindowExW
GetWindowInfo
GetUpdateRgn
EndDialog

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ