37f6a89367bd72bf067e38ee4121e03b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37f6a89367bd72bf067e38ee4121e03b_JaffaCakes118
Size

284KB
MD5

37f6a89367bd72bf067e38ee4121e03b
SHA1

b88692a819b4b637ff9208de316fbea9f4ba1ec0
SHA256

6d21a34fcf3eef0d97d1b5860bed6f64394e564151732959cc38f24018a75601
SHA512

12ea59b280376cf51e56f93df5478c8ea214b9c3e762fa5033190c1db27a90569b899433e1bd50cc68e9eda9482ed0cdbd65c46550edc57ca7ac4ef1ee5936bf
SSDEEP

6144:01FQtPwXLui0N3/6DAj1WEHpde39kImryPK2MKvnFx2j:0sCRM/mI1WmpdOKrAznFe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37f6a89367bd72bf067e38ee4121e03b_JaffaCakes118

Files

37f6a89367bd72bf067e38ee4121e03b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da479008f35a727d26b62e65e4b6ad0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

memcpy
memcmp

kernel32

CreateFileA
DisconnectNamedPipe
DuplicateHandle
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
ReleaseMutex
GetUserDefaultLCID
GetFileSize
GetConsoleCP

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ