36c6c758760d6579730c097152ffcaaf_JaffaCakes118 | Triage

Sharing

General

Target

36c6c758760d6579730c097152ffcaaf_JaffaCakes118
Size

72KB
MD5

36c6c758760d6579730c097152ffcaaf
SHA1

cfcb1166329be85855b859acb91b9365cf415acf
SHA256

c88b4ba1713b31914d34d7c54336d092f11ae580c083ccc2f911fcb49d1a989d
SHA512

67e3b6b1b6e9103590923a0b66d07ab5e4c5a5cdcb298fed2c030a6ccc60dfd9128a01622d794f20d0dfe1b5313fb1cad25dd6055c748b17647358d9998450af
SSDEEP

1536:Fc9ZqVQjN4U2VEp6FHNgTUCUo1oog/cNqicfS0Ux:FzosVwqHNjsoGYfSnx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36c6c758760d6579730c097152ffcaaf_JaffaCakes118

Files

36c6c758760d6579730c097152ffcaaf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ