36bc7f1741238ba6915face43aa0c2a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36bc7f1741238ba6915face43aa0c2a3_JaffaCakes118
Size

3KB
MD5

36bc7f1741238ba6915face43aa0c2a3
SHA1

bcfe0e865ee4fdcf6d5b986dee208f658d0e5517
SHA256

91ad1ce5c4cec45a972ec81b8263225f680df8a6cb979d3b870f909652ae1cb9
SHA512

f58d7c3171cad021e139f639a9f5a9ffad5d6a06c91e89cec1f54b3c77bf9813ae9e42a9ca7fadd18e737c967fdb1bf763ac37c6ed8f65ad149adafe9346ef41

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36bc7f1741238ba6915face43aa0c2a3_JaffaCakes118

Files

36bc7f1741238ba6915face43aa0c2a3_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95.6MB - Virtual size: 95.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ