36e838b5e9b228af5286143b9afc8e2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36e838b5e9b228af5286143b9afc8e2c_JaffaCakes118
Size

960KB
MD5

36e838b5e9b228af5286143b9afc8e2c
SHA1

8115a84e12f324c7c61462377dcb67f76e5bb043
SHA256

366755ba05bfad11bb54c9bfbdda15445bf9959634f0782e6cf5aa15ac7e0b7d
SHA512

df01a82ec3de078248e7bd09254e1201a330f429afc16cb54d87075b1e0a56f6bc34680a019efc582c7b8ed51552cbe94515899aef2040dc9b03e648da868344
SSDEEP

24576:F4kh0Snibhb4IBTouSl0DNfsETUyb+1oF+zNdl9FAF:F4Dm0VHXLoNd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36e838b5e9b228af5286143b9afc8e2c_JaffaCakes118

Files

36e838b5e9b228af5286143b9afc8e2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uro
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE