436d6a3a90da4e42816a311f5bcaa1ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

436d6a3a90da4e42816a311f5bcaa1ab_JaffaCakes118
Size

41KB
MD5

436d6a3a90da4e42816a311f5bcaa1ab
SHA1

40e6be9146d6f1e95a30b42156d55f7c4054ce77
SHA256

d804e5e08c0352eedf02488a17d39b764f500f1027a4c45c3aa89e2453db5aea
SHA512

2c7cf4f5f9a3010a6e00ad2143dfd30586ae1250711d997893a3c4dba6975988c839860db5d2d54506fce6852c6cf542d166f842e27de434829083201cf6fc42
SSDEEP

768:7p8dFwM6EWQsHDWlpy6xcm1uV+qC9AnaB2cAhjLTXoFYT4+tncEx87Wy+X8x:7A6rWry3naUjH5zaEx87Wy+sx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
436d6a3a90da4e42816a311f5bcaa1ab_JaffaCakes118

Files

436d6a3a90da4e42816a311f5bcaa1ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ