36e9d21b9ecf67e2e6d9f3f259c3c85f_JaffaCakes118 | Triage

Sharing

General

Target

36e9d21b9ecf67e2e6d9f3f259c3c85f_JaffaCakes118
Size

359KB
MD5

36e9d21b9ecf67e2e6d9f3f259c3c85f
SHA1

6f48b58807df71f50957d373b85f6eabf0fc5c90
SHA256

3d1ade2456b99cb1573710d7a2d57775536d0e7b80fb4cf47f34dcf31e125724
SHA512

8575410c9b1576de38cac1b8de1ab36f9989fe706fccb547ba8a0f6ab6a4b7a7fe239a7410a7beff45b067aab0dafe02ed70de58301fce070e44d58da7dd8a9e
SSDEEP

6144:QAVBXtruW8//rKC/Mz1C3sSTnvziJ+XV9Rgh3rKkg7rULU17:QATXBuVszcbiMXZgh7KxQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36e9d21b9ecf67e2e6d9f3f259c3c85f_JaffaCakes118

Files

36e9d21b9ecf67e2e6d9f3f259c3c85f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c800e8d1964fd275a1e1176f89374e67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
FindClose
SetEvent
GetTickCount
GetDiskFreeSpaceA
TlsGetValue
FindAtomA
ExitProcess
GetModuleHandleA
lstrlenA
FindResourceExA
CloseHandle
CreateThread
GetCalendarInfoA
Sleep
FindVolumeClose
GetLastError
VirtualProtect
ReleaseMutex
SearchPathA

user32

DispatchMessageA
CreateWindowExA
GetMessageA
CreateMenu
GetKeyState
CloseWindow
CopyImage
GetScrollBarInfo
EndDialog
IsIconic
EnableWindow
GetUpdateRect
DialogBoxParamA
DragDetect

msdmo

DMORegister
DMOEnum
DMOUnregister
DMOGetTypes
DMOGetName

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ