36bebb35e3fcc3bb3252cee0a1cf41b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36bebb35e3fcc3bb3252cee0a1cf41b7_JaffaCakes118
Size

15KB
MD5

36bebb35e3fcc3bb3252cee0a1cf41b7
SHA1

dddca25a7c995e9a096fe5949878724d1cef505d
SHA256

4e2aa4a0ae5eb2d2e7e8ab42acba5c16621bbefcdbeffa0821449cca68a0bb5a
SHA512

ba0e51fa96d17e89a26199cc311e0b28dad0e1d77787aebb3022a5e228ef337ba7e94ab4d2c0eb0feee617f13c2ee841a42e60abf643695727f45b4163d5e1fd
SSDEEP

192:J7bRloEPcRKckFWBcEFJYsEmyzZhsIzDtk0HjQvWDWHofKizJcKaRzA:J7FloE0cckFWBjFWsbUhvbHbaeKK2R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36bebb35e3fcc3bb3252cee0a1cf41b7_JaffaCakes118

Files

36bebb35e3fcc3bb3252cee0a1cf41b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b73cda72d2f5cb6bccc46f6ee7d366f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE