36798e2e306db2e738689628af2cc97c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36798e2e306db2e738689628af2cc97c_JaffaCakes118
Size

24KB
MD5

36798e2e306db2e738689628af2cc97c
SHA1

cf46492f00ccdd0feb4a4ed8e6a01ea4dcfcb21b
SHA256

11c6f1b9e79a44833bf55dc2fd4f1c414b785255fe9bcbcf37cb6b1c061eb28c
SHA512

62ca114d6efe8e2cf608af75d838071df7552dca5b4bb3233eddeb8fb796ed9798c3cde5e91d260c9a823d616961e8d5c1b71413dd8e8c15ff546ed9c005446d
SSDEEP

384:UOt1K3rF/LwSp5hmoollmXBssCQgF59s2yQu2DuLba8a9Ld+8tz1:SF/L95hgzs2Zu3LOvn1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36798e2e306db2e738689628af2cc97c_JaffaCakes118

Files

36798e2e306db2e738689628af2cc97c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

9c70588fd77579459c6fdc8f4ee235c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
GetConsoleKeyboardLayoutNameA
GetLocalTime
GetProcAddress
LoadLibraryA
UnmapViewOfFile
VirtualAlloc
VirtualFree

user32

ChangeDisplaySettingsA
ChangeMenuA
CharLowerBuffA

ole32

WriteClassStg

Sections

.data?
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.code
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ