36bc166fc3b73e1da60dc8ab96c183c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36bc166fc3b73e1da60dc8ab96c183c6_JaffaCakes118
Size

381KB
MD5

36bc166fc3b73e1da60dc8ab96c183c6
SHA1

f7e696f3e664ad344c3c2c97f70950ea0abb30a3
SHA256

d68bc17f28edf8bd00bdbacd1ab3864b58e4d526ad72634c7fc685a72361d614
SHA512

d0b77ff5c7095629cc383bf60d564c1d8e73725169a885621e5417b824f1add4205f11e52cd455e399d0570b9f9542a67175fb59cec0b7ed6b6d7fdf20eee340
SSDEEP

6144:bMPEuLnR4qvMZvsMcwyqMBpZlx5oXbgQuoRpFLG7E:bMMuKq0v1cwyVBpZlDoXbgQlRpc7E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36bc166fc3b73e1da60dc8ab96c183c6_JaffaCakes118

Files

36bc166fc3b73e1da60dc8ab96c183c6_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Share
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ