36ad754e9822acccf0bbed4acdc48648_JaffaCakes118 | Triage

Sharing

General

Target

36ad754e9822acccf0bbed4acdc48648_JaffaCakes118
Size

84KB
MD5

36ad754e9822acccf0bbed4acdc48648
SHA1

0d3b40cca8efc55cf718f0e4cf7cc2963f12f9fd
SHA256

c2ba959bcd1f6a24781f80cb448e819e105d6a46c59b57960aecd8dfe58836d3
SHA512

64909785e4101651b21b59dbd9e2555068d4410b0c8247f2185360bc1223273326f2c2dc9b5abcb3f005c9e0a90bb34ee8a52a2d484de0c2802ac3c8ef4cf26c
SSDEEP

1536:LCAIg0L4D+uQq7HeHJuUIo1l6DRzYpZIPxAUmPE5kpn7YyT3jzdq:JV0Ly+9IHeHtSDVYgiUmPE5Enzjzdq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36ad754e9822acccf0bbed4acdc48648_JaffaCakes118

Files

36ad754e9822acccf0bbed4acdc48648_JaffaCakes118
.dll windows:5 windows x86 arch:x86

d6a13d101468f0629ed1f00ff9efb6a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetFileSize
SetFilePointer
VirtualFree
ReadFile
GetModuleFileNameW
lstrcmpiA
GetProcAddress
VirtualAlloc
LoadLibraryA
WriteProfileSectionW
GetSystemInfo
GetModuleFileNameA
GetModuleHandleA
CloseHandle

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ