3634ada7c6a42c28a1329d2576075706_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3634ada7c6a42c28a1329d2576075706_JaffaCakes118
Size

24KB
MD5

3634ada7c6a42c28a1329d2576075706
SHA1

4adff785e60c33e1b424a270f22a21b763bb2136
SHA256

d653521504f217e9c3ff7e5cd72ccc7fce93a639a12fa906d86429464df76edb
SHA512

e84fe29e327cf018930c0f009dac7bb025f6ddb918b4017146dc6894b6729b5c64c577794cf11f2b728d6c9d21118ed52c51c00ff2d182e0394549b6017c805b
SSDEEP

96:PGt339SWlP3Uy8UjGhRyuiozZ71e+o83MRUQnSTychd4A8lqFS:PKtSWlMy8UjurVF71C8YUQnSe8dvJFS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3634ada7c6a42c28a1329d2576075706_JaffaCakes118

Files

3634ada7c6a42c28a1329d2576075706_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36d638fe3c6288451df738ac0bf08e5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess
WriteFile
VirtualAlloc
CloseHandle
CreateFileA
GetModuleHandleA
SetFilePointer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 296B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ