36b5eef5b32fbb00b57659eb7f253d58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36b5eef5b32fbb00b57659eb7f253d58_JaffaCakes118
Size

16KB
MD5

36b5eef5b32fbb00b57659eb7f253d58
SHA1

70cbb2d68f23f34b3baababfd1b102afa0eb76cf
SHA256

ca6e1b8196df63d244eedaf0572fbd61a382a6acd457825117fa94e1a2ecb373
SHA512

e3e84fe378a82e1942221b025ac4c8a0f603afd7e64f38cf2e7aa4a3c9b386d2c00a1a7ed4681b5b6d18f76bd2405f12803164084cec2cc189b8b548b60a7fad
SSDEEP

192:A4ma+28XYFXuMJcnq7F3Jb++hT5pOOoeyFoBCC4x:Ay8IFX37xJ6+hTLOtJaBZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b5eef5b32fbb00b57659eb7f253d58_JaffaCakes118

Files

36b5eef5b32fbb00b57659eb7f253d58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5d57ba56be42f1e64ad543417e133bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
signal

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE