36e748993edfad5f91791bf9c1a44efc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36e748993edfad5f91791bf9c1a44efc_JaffaCakes118
Size

40KB
MD5

36e748993edfad5f91791bf9c1a44efc
SHA1

58a77fe6a5befa969e04542caa7b1363155861ff
SHA256

dde33c2b9848cd87a9eb5aea8dfde34328b666cf95ebcef3eaf305ffc88f872c
SHA512

0df6521e986629d69a1ef9bd541906f2bad04b4cb52c8ef5d13bfc166c75f6717b1d1d82bd2629f047792961a56f6378df1fa3986b8b208f71332d146905c9f7
SSDEEP

768:7F2Oi5T0xlRPeVI918IBqns8XCM1N2+HLCCRNg0VrvmP2Ys2clsIXF:7FqmJPsy8IBHB42+rE0VruPBtcR1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36e748993edfad5f91791bf9c1a44efc_JaffaCakes118

Files

36e748993edfad5f91791bf9c1a44efc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f113708e25b122772da3560d2483d6a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetProcAddress
LoadLibraryA
lstrcatA
HeapAlloc

user32

SetWindowPos
SendMessageA
SetTimer
InvalidateRect
AttachThreadInput
GetForegroundWindow
KillTimer

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ