36b9dfb2b27a47783bc6fb82b919effd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36b9dfb2b27a47783bc6fb82b919effd_JaffaCakes118
Size

16KB
MD5

36b9dfb2b27a47783bc6fb82b919effd
SHA1

7c21cf311be78a0eb58ebf736a3b491ff9dc9eae
SHA256

1a2b18f0b4e8190d3b81f4ede46886c97d6473e559035d5309915a107bb8b360
SHA512

865d197f32d8e5a3731b276adc111eedc9289296402d9a9f0c2a1720f2ea790cabddaf317e84708657e71f922d1bfa48f9ab1193de0942e384157e7e159d5fa7
SSDEEP

384:mGcHoOOHu0AeKSbMwh+iiRqT+oZfrHxAglja4kgWCIG5pMHoVSIK:yIOOXK2Bh+iiRqDZTRAgta4kg/LMHosT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b9dfb2b27a47783bc6fb82b919effd_JaffaCakes118

Files

36b9dfb2b27a47783bc6fb82b919effd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\XRoot_Build\X5.2\Vm\release\StubExe.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ