JaffaCakes118_36ff98f6d38a5b768da684f3ff2fac90 | Triage

Sharing

General

Target

JaffaCakes118_36ff98f6d38a5b768da684f3ff2fac90
Size

488KB
MD5

36ff98f6d38a5b768da684f3ff2fac90
SHA1

50ce974990f033d1001f72a3e34bb3090b923222
SHA256

cd58ee13800267f44a8bd3d420eda383adb3926f8279eb02edccca71a17d3cb2
SHA512

6252dfd46efe29929c7715300f76af5c12cb8ceb735c96d9f08dca6a2dacf2823031058c7881fbd55c4ca7a6ca1ca342f85e41319822e9c9612092b9a77ebb6d
SSDEEP

12288:E3jP6cThELeBVu4o6Yqauc+15V4HCSC2bY5o5D7O531vbY:aL6l6K4ok3Ejc5oGl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_36ff98f6d38a5b768da684f3ff2fac90

Files

JaffaCakes118_36ff98f6d38a5b768da684f3ff2fac90
.exe windows:6 windows x86 arch:x86

63ac7c2799723925dd310860701c20d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

advapi32

GetUserNameA

comctl32

PropertySheet

Sections

.bss
Size: - Virtual size: 236KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 350KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE