1936f063356ce2155fbf9d3b6074f578_JaffaCakes118 | Triage

Sharing

General

Target

1936f063356ce2155fbf9d3b6074f578_JaffaCakes118
Size

364KB
MD5

1936f063356ce2155fbf9d3b6074f578
SHA1

9b0287b91b1ea85a79df0274cdf9f1f8acd6b251
SHA256

1cb6b7d5b9e6dbc568c83b14b609c9514907190ce215a17775d358ac5be9d02a
SHA512

f9c2c81e0a3780b391dd40a418166639a52a9d987276b658e9c272b613aec6926f6f0220e6325447c4476adf17601932da68143a297805ec37bd76265c2e8269
SSDEEP

6144:Be4tjpzKCoeJiCEx2OAhEqItoziEOBw71EYYVc4UmcLoZHOHk:7KCCr+EltoGEOisGk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1936f063356ce2155fbf9d3b6074f578_JaffaCakes118

Files

1936f063356ce2155fbf9d3b6074f578_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 906B - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 3.0MB

.engine
Size: - Virtual size: 444KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.info
Size: 314KB - Virtual size: 316KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE