36951b19606ac961ad92453836d04e1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36951b19606ac961ad92453836d04e1b_JaffaCakes118
Size

30KB
MD5

36951b19606ac961ad92453836d04e1b
SHA1

5577ab7d899caaa366bc880ed6bc516ca4148032
SHA256

ecfb077b3dbb37b3f0c5a70d34d6956e32997f92cda0b4bf29608deaeec169a5
SHA512

9d1b36e640776665573bbe2e718aaff557482e089c0178afcbb4860947c26b314df3b23ee4dc50e94e796697f0f248d65faa2d092bf840836ef2ed0f716802fa
SSDEEP

768:NS1gfKDiE2W6lyN1U9vgIptCo/0vIbhDd04KixHn:NS1QBlyPUrCfUhJ0Tit

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36951b19606ac961ad92453836d04e1b_JaffaCakes118

Files

36951b19606ac961ad92453836d04e1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 288KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12.6MB - Virtual size: 12.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ice
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE