36d0f51a45fc590415d473efd00ca252_JaffaCakes118 | Triage

Sharing

General

Target

36d0f51a45fc590415d473efd00ca252_JaffaCakes118
Size

201KB
MD5

36d0f51a45fc590415d473efd00ca252
SHA1

dd5132c02349042953637f26603825870a6f3b85
SHA256

4890491ea1e0a2a4c59a93cf258b46a74b9713e337c43163b3959fe487117373
SHA512

24e6281444670a7182456628671ac83b61f81b0719276ec8302f75d8ff10f00d4adaf67c7827b270d717faddea528e2290a13ccf188a3da8172d7c0457cca85b
SSDEEP

6144:8FEhptpLeyFARDo1nrR/pQK7raUNE38P+Y6CfR+8:hptpLFGuyKyiPL6QH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36d0f51a45fc590415d473efd00ca252_JaffaCakes118

Files

36d0f51a45fc590415d473efd00ca252_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73542da96afb74e06fe9678a09329ab0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
CloseHandle
CreateFileA
LoadLibraryA
ExitProcess

user32

wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow
SetWindowLongA

advapi32

RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegCloseKey

Sections

.text
Size: 158KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ