3626f63b78d702bdc2c0a4c2f88a3836_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3626f63b78d702bdc2c0a4c2f88a3836_JaffaCakes118
Size

936KB
MD5

3626f63b78d702bdc2c0a4c2f88a3836
SHA1

5ee850f3b0dad7394cf818c37a0ec7c28e067ef9
SHA256

c66af6916d5596ba61549eb1936dbd1b24420e2836cc3d1e6e64eb3561f80563
SHA512

1251ad450225f9dd6b9fad3dbdc609901d0293656cfb7bf7d668b7a09d903fc132685bd398fa1c005c752443d45539dde9fec327ba855ee9be348cfaff30d40e
SSDEEP

24576:VYcxWvGzOoowfihGQXEH3NVr3V2yQDneS:/8ONCGXHdVjkyuneS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3626f63b78d702bdc2c0a4c2f88a3836_JaffaCakes118

Files

3626f63b78d702bdc2c0a4c2f88a3836_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 913KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shoooo
Size: 933KB - Virtual size: 936KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 6B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ