36bd63485291c2acfb150e1f0c9a202a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36bd63485291c2acfb150e1f0c9a202a_JaffaCakes118
Size

248KB
MD5

36bd63485291c2acfb150e1f0c9a202a
SHA1

26cb9a8c3dc1a1963f38fc479fa099558a925ada
SHA256

d757db093c535810601406d08730ce50060cfb14a8ae1f7aff18e0630b206b0c
SHA512

911f277c391f5710968c31020d50a23d5f40e4ca2d88edbb2cb7d1404624c0ea9ef8e042e89ff1c9f8af8c3d2227edfcc197ef64af4e387bf603713fc1c6f592
SSDEEP

6144:GZyrodyctYrT7/PsW8EZd40seWs9Zxip:GosbtYLPsfEHlWs9ap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36bd63485291c2acfb150e1f0c9a202a_JaffaCakes118

Files

36bd63485291c2acfb150e1f0c9a202a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 43KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 195KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE