636a6d454b40bc1b9644d7faa07a4da8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

636a6d454b40bc1b9644d7faa07a4da8_JaffaCakes118
Size

26KB
MD5

636a6d454b40bc1b9644d7faa07a4da8
SHA1

54e912b96c63eccb3e629f6ef4c01efc533c6318
SHA256

f0bd41bdb8a126c53162ac12f8c3fc4ce3a1b6d5c722924370491780c720557c
SHA512

749eb252b77881ccd9af39b72916d2e4d3393a9c6658e4d7c90cac998cc7c132c81597f7cb8c644a98bf355f54c796767b9425a72529618abd6590b58d4a9ad5
SSDEEP

768:il1pXC902j6Bg4vzx0jrg8zT3e5KlBM3E:il11/vg2qjEEze55

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
636a6d454b40bc1b9644d7faa07a4da8_JaffaCakes118

Files

636a6d454b40bc1b9644d7faa07a4da8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aeeb44b6c0a8c0c3ba722475fb770a76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowA

kernel32

lstrlenA
GetProcAddress
LoadLibraryA
MoveFileExA
VirtualAlloc
VirtualFree

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE