36ea2fbeb36630aade5148ab1ee2713c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36ea2fbeb36630aade5148ab1ee2713c_JaffaCakes118
Size

186KB
MD5

36ea2fbeb36630aade5148ab1ee2713c
SHA1

6ccb8ff498649bbfd87d757266f99745f7342de5
SHA256

a95e4db52d468b51c9c30d57b28e13b9f196b97bf84a28e6e93d2343d67b5aad
SHA512

b5ca4918a061e2f7d0192efd46a97a3bd0574f06505b445b6ca8584ae9601b611f38f71b998c6f4a6a7ebe2c62d1efc7df5a0e7a69571740bea40409b04ea151
SSDEEP

3072:N3oOAuC1RsMkdlSLuCjJEn608hmveTrvsjFq9LT+c3FKKnxGGRPdTmWpaii:N3oPuC3sfdMuCunh88aIc3zGGRtmWpaV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36ea2fbeb36630aade5148ab1ee2713c_JaffaCakes118

Files

36ea2fbeb36630aade5148ab1ee2713c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94bd2085ac3f3886a7ccbc78ebf6d169

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
HeapAlloc
GetCurrentProcess
RtlUnwind
HeapFree

user32

CharLowerBuffA
wsprintfA
CloseWindow
CreateWindowExA

advapi32

RegEnumValueA
RegEnumKeyA
RegQueryValueA
RegCreateKeyA

ole32

CoRegisterClassObject
CoCreateInstanceEx
CoCreateInstance

Sections

.text
Size: 65KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 74KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE