36b785d78c77571377c95ff418f5242f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36b785d78c77571377c95ff418f5242f_JaffaCakes118
Size

34KB
MD5

36b785d78c77571377c95ff418f5242f
SHA1

5763e0ae587eecb9efbfd112a9298433ebb6a9aa
SHA256

064d3e15283234c9e87db9ffcf02729157dc47403c517fb0d264d47bb4218df0
SHA512

c47134d888daaf8aa38f3bc8c553a65fc37d1017fce20cb702e39de9dc0f7e5e4b21eb1934f5b9eb2a97b336d2b0c172142241acb888bca5a53b92e19658538c
SSDEEP

768:R+OiTZtsqBV2PG6x55X9HfWg/hnLHp3T0O:R+/vsa21X9HfWY5zpQO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b785d78c77571377c95ff418f5242f_JaffaCakes118

Files

36b785d78c77571377c95ff418f5242f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b50ae54fd209fb2917e498c5aab63bd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetCommandLineA
GetFileSize
GetSystemDirectoryA
GlobalAlloc
GlobalFree
LeaveCriticalSection
CreateProcessA
LocalAlloc
SetEvent
Sleep
VirtualProtect
WaitForSingleObject
WriteFile
LoadLibraryA

user32

DefWindowProcW
GetAsyncKeyState
SendDlgItemMessageW
SendMessageCallbackW
SystemParametersInfoW
TileWindows

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ