36ce75fcd9a0908ae5ecf413dc2a4c24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36ce75fcd9a0908ae5ecf413dc2a4c24_JaffaCakes118
Size

145KB
MD5

36ce75fcd9a0908ae5ecf413dc2a4c24
SHA1

946f82e88027a8716f01e8fb26031ab42b9b422d
SHA256

51196491a4d05c8cd67a9558c8743df9d2272eba842ee8d05ecb27e23ec9aedf
SHA512

be359f4a94c4dbfc4479e3676665dfde13850fa187c158e109a4ac1d96d2e099ac0d4761468797d2ecf0913f8d659e0d84f6a4a09799ef6a457a65558be71053
SSDEEP

768:B7W4GaM+Xk2J7+PT4I6uMGbMSJxY7qNirD9LdsU9mR6RARQ2:B7W4j6PTyGbM42+GZmY2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36ce75fcd9a0908ae5ecf413dc2a4c24_JaffaCakes118

Files

36ce75fcd9a0908ae5ecf413dc2a4c24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4accc905c003d4607e02026d94e7d466

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetFileSize
CreateFileA
MapViewOfFile
UnmapViewOfFile
GetModuleHandleA
CreateFileMappingA
CloseHandle

user32

SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
MessageBoxA
LoadIconA
DialogBoxParamA
EndDialog

comdlg32

GetOpenFileNameA

shell32

DragQueryFileA
DragFinish

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ