36782670f64664c00527597d657f9503_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36782670f64664c00527597d657f9503_JaffaCakes118
Size

128KB
MD5

36782670f64664c00527597d657f9503
SHA1

7ffdf46bcbb3b830ad05b9967ca4c019790f0294
SHA256

e464b833d5c91cf47ccfc6ee91113586161d0b06a5c239f923683cd488a7b26f
SHA512

6fbb006b7945d4f1faaa237b480cdeba283cb7e99dce2c803437d4c4e038d068207ff07c5a5650c1760cceb34810c96da5db3b41d716abcc20914a4420c88fee
SSDEEP

3072:mycF/cP99YNvSeWHlkWEmO0pFSFjfW5DI7IWhiEF:mj/+9YfTpIpCnF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36782670f64664c00527597d657f9503_JaffaCakes118

Files

36782670f64664c00527597d657f9503_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

kq
Size: - Virtual size: 216KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pgl
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bcr9
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE