36246550ac88196094e18cea91f1bc8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36246550ac88196094e18cea91f1bc8a_JaffaCakes118
Size

190KB
MD5

36246550ac88196094e18cea91f1bc8a
SHA1

4ba369e44beeda47ccfb19e6aea8acc0c0e0ef82
SHA256

8582bd8da2009fb5109a1b4f2c5a38c03ef7774f3f327b5a9a307939c9d35045
SHA512

f0473fc9962050ed2193fe96d2f70d4b4928621018dbbc14dc859fffa7e6a096f880d2e4f449d58e7f48d723a90ba0f4f4cc3ec0804220df4a29e5b5f4860fb4
SSDEEP

3072:Kz/KjB4BHTerwRboSF+Z68MNpH5wKb3v686agsHKtTGzHPqwRqd9kCxFt4V0F:KaUy8RboiJTHHGKb3v6HPsHKtyvHRsf3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36246550ac88196094e18cea91f1bc8a_JaffaCakes118

Files

36246550ac88196094e18cea91f1bc8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

xX
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE