36d07b5a535d49c057eb3d352ad6e9d9_JaffaCakes118 | Triage

Sharing

General

Target

36d07b5a535d49c057eb3d352ad6e9d9_JaffaCakes118
Size

48KB
MD5

36d07b5a535d49c057eb3d352ad6e9d9
SHA1

fcacde10900fe0b828a4575bf910f2200fc6f1e1
SHA256

35b8f80dead61ece5098728eed0af3130eb9e7f99bc4bf8f5adc82d61997c9ca
SHA512

b0d7ab5fe9fcc9faf3fbe52fad750800c26f7771145f691158acd78cf6fcd65096a556a05027c43d91514100448dce75d96889fa8b51d366c48aa6e24427c673
SSDEEP

384:kh7X+f0iqx1++NMEYZsKk80Rgr/KMNXPGuWOhuZ4xOr9qI/FN5v8Jd:k1PPDSRi8m+ZGtOjxOhqItN5v8Jd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36d07b5a535d49c057eb3d352ad6e9d9_JaffaCakes118

Files

36d07b5a535d49c057eb3d352ad6e9d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a084dc5b6f1cf958bc179bcf0ed3942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CreateFileA
GetProcAddress
GetModuleHandleA
GetLastError
LocalAlloc
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_adjust_fdiv
??2@YAPAXI@Z
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE