37eef95ffce83cc2ccc5901eeaf24b97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37eef95ffce83cc2ccc5901eeaf24b97_JaffaCakes118
Size

204KB
MD5

37eef95ffce83cc2ccc5901eeaf24b97
SHA1

e3da48522b60009dbc71e5a318eb7d9b9fc164f6
SHA256

d336a8ba8c0310e33a770c212960199db7b6385371e60e005ff73e3ce10fc347
SHA512

ae13b924d66121363932cc2a236fe966d6598f073a6066879a3e99c9260c9bd3416581d3eff8f40d78c931bd622b086c169fe9bac44d5d765ead82f8635d872a
SSDEEP

3072:W+cqBX+UdUQpy2ffW5ZCXnsGmIb362s4mrN+yK0m6vkrCy:W9gXSQpy2fgCcGm3FH4bX6x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37eef95ffce83cc2ccc5901eeaf24b97_JaffaCakes118

Files

37eef95ffce83cc2ccc5901eeaf24b97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf75be68bd5bc605170682908ec88172

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAllocEx
GetModuleHandleW
IsBadHugeReadPtr
GetCommandLineA
ExitThread
IsBadReadPtr
GetProcAddress
lstrlenW
GetCommandLineW
LoadLibraryExA
ExitProcess
LoadLibraryA
GetLastError

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ