0036b7db7d9bb08df8ba6e82b39baaaf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0036b7db7d9bb08df8ba6e82b39baaaf_JaffaCakes118
Size

741KB
MD5

0036b7db7d9bb08df8ba6e82b39baaaf
SHA1

2961634911ba110d5b5b446f6833022fa91b0d09
SHA256

e254d48bce84cb1757b6aa12b9f1cfcc01d4b88d7054dca1f58d18b840e85014
SHA512

95938a1e1fca0d18c868f5836928a73e994069afa23000e3a41a6f3daf11c5a68b509c52ff38320353b6145e0a787836ccbb228e1d1e4d4c0f0dafe2263a222b
SSDEEP

12288:XhZeXbQKfFa363DHW5AxsKDjidSs5Wi0gDUpI2wNbdk4/nlD5DEavKj4aXP6oEO4:reL9KoHW5AWKDjHs5J2a2CbdfjvKxyoc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0036b7db7d9bb08df8ba6e82b39baaaf_JaffaCakes118

Files

0036b7db7d9bb08df8ba6e82b39baaaf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 685KB - Virtual size: 685KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Spirit
Size: 50B - Virtual size: 50B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ