36a1e35e37c509ceb7659b2feafb7fac_JaffaCakes118 | Triage

Sharing

General

Target

36a1e35e37c509ceb7659b2feafb7fac_JaffaCakes118
Size

1.1MB
MD5

36a1e35e37c509ceb7659b2feafb7fac
SHA1

e2d0fb5f56363ff9fda5e2cd305fe553f06b1016
SHA256

b0aa93eab5b71d1dbbc25b4cb0accf9bff16ea649d8a00adb8df3213e5593fda
SHA512

c20d782ab0c9c78d9e2cba4db56e425dd5308bfa14f7e0161bd40eb8b92c65e044ccadc86cd5cb7690f93278e28b0c2aa72a788bde2e043542c11eabe0bd2fe0
SSDEEP

24576:LRJR/SSFLvCd320b52w2iy6eo9d15WPlff68j0TxoiY2ZEnaPyYw0pTFzKPg0Jok:Lv1nLvCd32Y52Fl6eo9djWPlX68j0Txt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36a1e35e37c509ceb7659b2feafb7fac_JaffaCakes118

Files

36a1e35e37c509ceb7659b2feafb7fac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 773KB - Virtual size: 773KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ