36401064f37d2d1a2b7f231b75312333_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36401064f37d2d1a2b7f231b75312333_JaffaCakes118
Size

5KB
MD5

36401064f37d2d1a2b7f231b75312333
SHA1

a89f6ecd1aa0204378f52cc30b54259c0efc7ebf
SHA256

1b7b776e2bbfe19de85bcbfcb3f86bbe6dff9d1b0a88af80dd386b58ae2bcb8d
SHA512

1ffebb3b4ecd6f00ded400d92a394337d0cc3ccd8928e11c054aedae1b302b4dc892a45512c8102345cef1c0aca846863e882a2716e5e1f7872005fafef8ee3b
SSDEEP

96:CkHuYguHHWnk68/hGHYHPKUsoPGv5E/H3wcLV71G/L+q5:CkHTnekjOMGWfgcR71EKa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36401064f37d2d1a2b7f231b75312333_JaffaCakes118

Files

36401064f37d2d1a2b7f231b75312333_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0165e5be60a9b3980fa02bcf75a1844

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GetModuleFileNameA
GetConsoleAliasesLengthA
FatalAppExitA

user32

LoadAcceleratorsA
SetWindowsHookA

gdi32

GetCharacterPlacementA

Sections

.masm
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ