36a4b90c8b4a1cdbed9abdc87470fd15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36a4b90c8b4a1cdbed9abdc87470fd15_JaffaCakes118
Size

37KB
MD5

36a4b90c8b4a1cdbed9abdc87470fd15
SHA1

f4bd981c488f6fea19f25ae630102aa1d9e3810d
SHA256

de8bfd4271da1750530276fec3bf94a08583058365ea7b9b772e8c3e52267aa0
SHA512

be08021111286819059a00e460f89d8e53361288377649dfd77adf487020c6834569b9a4cb86040138026a01a7dfcf8744042a87c4793835191f73855177b867
SSDEEP

768:BqQ7oOQWmJdbe5CWXCjBBOk+b5D8ESuEt9NfHVSlsrmVlxEWmdzmwAx:8Q7oOQWm7y5feBBODSEXEt991m0YCEX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36a4b90c8b4a1cdbed9abdc87470fd15_JaffaCakes118

Files

36a4b90c8b4a1cdbed9abdc87470fd15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd330dd1a2ee724aff6b6dbbdf267227

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetFileAttributesExA
HeapDestroy
HeapFree
QueryPerformanceCounter
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE