36b3e73129c5505bf15059198157ddc6_JaffaCakes118 | Triage

Sharing

General

Target

36b3e73129c5505bf15059198157ddc6_JaffaCakes118
Size

299KB
MD5

36b3e73129c5505bf15059198157ddc6
SHA1

478de726254114ed2c78e30eca92fe1288f450ed
SHA256

b6d7b13cdfb6e73aa644201fe747fbe7dd18a0f8546c125d2191f2f6bd2ae426
SHA512

d4ee5e99aff4154136ea7c6184af762feb3f7dea4c1ffa2373b07bae13f536dbd31078ebbef1636aa1ac5d9c5ed4d08236f86d0fe0ea537cb9932114c5157477
SSDEEP

6144:Q9jsBMeNbvOd1fDuUItGP+rinC5Lxn61r0YnjBpTUYa1wYAFd5:Q9j412DuUIt++ri+MLVQwYeX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b3e73129c5505bf15059198157ddc6_JaffaCakes118

Files

36b3e73129c5505bf15059198157ddc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.data
Size: - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hacksa
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrr
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE