36ef0070e5ffe2488023774bf102502d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36ef0070e5ffe2488023774bf102502d_JaffaCakes118
Size

814KB
MD5

36ef0070e5ffe2488023774bf102502d
SHA1

00fc01cb64872610d8dd1961401428fded6c89a7
SHA256

2ece07fdb85af36c2b50850935955340337d887b4fb40a647dada123370c4983
SHA512

7901e29bc51ae000e222760d8b50d6d05736646a14995a700efdf11fb79453e58e89481c003738cc87f8b23838f997a7e04b2511be8590547421c88a5c999c32
SSDEEP

12288:DPKD0ClCIazKBpMAH69WcmMmjhmerPnkX9aEDwC3YIiH4SOeVonZp2N90i5:eD0CMzKfaRwjt1UwC3YIiHjCOT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36ef0070e5ffe2488023774bf102502d_JaffaCakes118

Files

36ef0070e5ffe2488023774bf102502d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

07c7642ab5bf9a710201247ee4dafa4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryExA
Sleep
CreateFileA
CloseHandle
WaitNamedPipeA
GetModuleHandleA
LocalFree
GetConsoleCP
FindClose
FindAtomA
FreeEnvironmentStringsA
GetLastError
GetACP
HeapCreate
GlobalUnlock
GetConsoleAliasW
CreateFileMappingA
LocalLock
TlsGetValue

user32

FillRect
GetDlgItem
GetIconInfo
DrawEdge
CheckRadioButton
CopyRect
IsWindow
DrawFrame
GetFocus
CallWindowProcA
DefWindowProcW
GetDC
DispatchMessageA
MessageBoxA

clbcatq

SetSetupSave
GetCatalogObject
SetSetupOpen
GetComputerObject
InprocServer32FromString

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ