37c814d574d2c780d1041d1901f25f6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37c814d574d2c780d1041d1901f25f6c_JaffaCakes118
Size

120KB
MD5

37c814d574d2c780d1041d1901f25f6c
SHA1

cc13ecda9778717755366ee98df231ea539766f7
SHA256

ed68917279f398508e65d7f2d4215d387aa0a571bc8dbda3e98a31750a27dabf
SHA512

a921ea5dc4fc3749dea4f107561da7750a7d02f6d7949cfa7c758551b3d983f032d8a0462f77ab369fe736f55c0f5acfcba756a393f389234ffc4d8615cdcf47
SSDEEP

3072:esikvXZ1A05mA3ykAjdh5Iid+NM0YHyZANCGvzL/:g6w0AW7AjL5Xd4M0YHy8CGvzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37c814d574d2c780d1041d1901f25f6c_JaffaCakes118

Files

37c814d574d2c780d1041d1901f25f6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4073afef3b313ce30aed3bb1f2c2011e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
FindClose
VirtualAlloc
EnumCalendarInfoA
ExitProcess
EnterCriticalSection
FindFirstFileA

user32

GetMenu
GetKeyboardLayoutList
EnableWindow
IsMenu
GetCursor
GetActiveWindow
IsCharLowerA
GetKeyboardType
IsCharUpperA
GetKeyboardLayoutNameA
IsWindowEnabled

Exports

Exports

Epl_ADUpkKMnks
fR2Rx@16
_XSrj0ga
nAIuFylUQbWr
_cunuZw@12
Gi60sJyuv
eQHV4Axb@20
_YgTa6o
_cZpco_uE
42RnAHtMIuf@16
_fZxmI2QmhisTAt@24
OzcTlH4PXd
_8w4ZPNopn

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/string.txt
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/BITMAP/BBALL.bmp
.rsrc/1033/BITMAP/BBCANCEL.bmp
.rsrc/1033/BITMAP/BBCLOSE.bmp
.rsrc/1033/BITMAP/BBHELP.bmp
.rsrc/1033/BITMAP/BBIGNORE.bmp
.rsrc/1033/BITMAP/BBNO.bmp
.rsrc/1033/BITMAP/BBOK.bmp
.rsrc/1033/BITMAP/BBRETRY.bmp
.rsrc/1033/BITMAP/BBYES.bmp
.rsrc/1033/BITMAP/PREVIEWGLYPH.bmp
.rsrc/1033/version.txt
.text