37e14eaeea5fb72bf63a1ad7e4d4f3ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37e14eaeea5fb72bf63a1ad7e4d4f3ca_JaffaCakes118
Size

99KB
MD5

37e14eaeea5fb72bf63a1ad7e4d4f3ca
SHA1

48b87d57f85633dade9e344ff5d2e43b15f2e52a
SHA256

600c610caba09bc261ff6cb85e5a108f62b8128cfdae34165add4f39b18aed5f
SHA512

e4f7325dec145f532baa4c446b5cb408e140cdff1100d06d735923ee3fe40dc9dc80a2a3afce499fc81c08e4c85bdce900d5a8bae8572cfc9cbfe09c5a5b3546
SSDEEP

1536:SKtTU6z1nLxWqdpiHsyqUkwvIhux1xbTqK7vJ9fppbCZDdai4gOq:SKtgc19dpiHsyqv1MZ7h9xpbYdafq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37e14eaeea5fb72bf63a1ad7e4d4f3ca_JaffaCakes118

Files

37e14eaeea5fb72bf63a1ad7e4d4f3ca_JaffaCakes118
.exe windows:1 windows x86 arch:x86

246667c7894354b09bdd4b0924ff921a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strtol
wcslen
wctomb

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 608B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 760B - Virtual size: 760B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE