37e2fdc85d615651762a2020e4675b99_JaffaCakes118 | Triage

Sharing

General

Target

37e2fdc85d615651762a2020e4675b99_JaffaCakes118
Size

56KB
MD5

37e2fdc85d615651762a2020e4675b99
SHA1

547ac2e8db1e8e34228465f4ab5569c2a8ba9e5b
SHA256

777a15ed14ac7032f2055e3a307f9ba148f37b241ba591a4a4d3c0a441c99eb9
SHA512

198f0cc64e81e8ae772918f0baac8dcbcab65afc107723b1422eca7130d203f201342afb74294ccf8b5b1ab2ae1da90d549e14ae4ef5cbf93dd579a73f856cda
SSDEEP

1536:Y3y9OpMlBtqu66ndYxr97YtxVBvlsIBkYUKo:t9bKvPjKxVBv+KkZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37e2fdc85d615651762a2020e4675b99_JaffaCakes118

Files

37e2fdc85d615651762a2020e4675b99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a0f0713e5c1f42fa443a813f4d44cfe8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapExtend
EnumSystemLocalesA
DisconnectNamedPipe
WriteConsoleInputVDMA
CloseProfileUserMapping
SetConsoleMode
WriteProfileSectionA
InterlockedFlushSList
DeleteFileW
GetAtomNameA
HeapQueryInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE