336b562a9373cff6ce4d45d9b736daab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

336b562a9373cff6ce4d45d9b736daab_JaffaCakes118
Size

368KB
MD5

336b562a9373cff6ce4d45d9b736daab
SHA1

58b088c58882de213112abf9eba42ae75989cdf8
SHA256

5ae768bacd83e77ae7a0347a5f0b5f5c1526dc34a3dc80c66bed8af18b1c19c6
SHA512

73c704d22fcc35208925903dbfd0e568f4527d18913173641a53accdfd4cd1bab13a9739fa91dc70e99368709ccc01fd29a9c7ae29511c963e4ebf6894f13442
SSDEEP

6144:Ua4MbO4Xs+FrraZ4IlPvIAjrODGQOA9z1/wmxc1JovGEcXuPjkwptZFcBv:54qIIre4iPv/jKCTAt1/wCWG6IpFc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
336b562a9373cff6ce4d45d9b736daab_JaffaCakes118

Files

336b562a9373cff6ce4d45d9b736daab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PopSky
Size: 367KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE