362a566898f76c6d8b62e8d44ef5444b_JaffaCakes118 | Triage

Sharing

General

Target

362a566898f76c6d8b62e8d44ef5444b_JaffaCakes118
Size

1.4MB
MD5

362a566898f76c6d8b62e8d44ef5444b
SHA1

cbde43a5ed8c18036b31f3e80605933feb8aa229
SHA256

24dcb8cee59545a94fd82316bd046a2556ee51a5b74393d6bb720785d47f18ed
SHA512

5071a91346d41240e1825712ee00ac661a6583cec2377bb62965fa1ac41e62076b0580a4692bd39119eb4d2c5c84623657c222e3c7923a3835630b12ba25c9d1
SSDEEP

24576:nC0jE3DTiiz5IPIQ47WZAAWqd9hDo5/mdD0Qi1Gp7T:7Y3DTb9IFMWZtdDs5/mqGpn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
362a566898f76c6d8b62e8d44ef5444b_JaffaCakes118

Files

362a566898f76c6d8b62e8d44ef5444b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\build\360Safe\360Safe\Release\360Safe.pdb

Sections

.text
Size: 601KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmj
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE