37e5760796ef9d2838e45b4ef74bced7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37e5760796ef9d2838e45b4ef74bced7_JaffaCakes118
Size

66KB
MD5

37e5760796ef9d2838e45b4ef74bced7
SHA1

1448255bdf5f2d7783aa99e75b7985ddee2437d8
SHA256

a4bdf34179a357a5c93c3321b94f1a415b88b6b9044fa33cb6dd37d56ac0788c
SHA512

b52e70f1380c5a3c2c8006cf9a0d16694d2274ca3bc2fba1f1629f4c70cd90250d4ae7812dfafdacd289b855ae180b018be802cafb9c6605b5561efdc1e88180
SSDEEP

1536:WKHlmkxWCMfjyplJTaY2IjfRh3SxFjbbXtblBt7jhKa2bUMRJEy:ZmkxWCMrOl5a8fRN8Fj/nP9KaURSy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37e5760796ef9d2838e45b4ef74bced7_JaffaCakes118

Files

37e5760796ef9d2838e45b4ef74bced7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 64KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE