4c36f68381f6b5d1e24269721a5a0a03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c36f68381f6b5d1e24269721a5a0a03_JaffaCakes118
Size

1.8MB
MD5

4c36f68381f6b5d1e24269721a5a0a03
SHA1

f11a481c09d488f4ff70552d1f9a2583f06badce
SHA256

2aa822f5fa8eea4784cc12b9da2e124a9f6608181b961360ede5e5c461490e61
SHA512

03540e74c3b1cfe994b65c6463a2cb648b3c92a893e10cd2b24ada2a63f28e38175a6d15e99a2d6680e6ecd90a198af82ccdb5d74cf2043a57a30f9b802ce7d3
SSDEEP

24576:Q/KPyfBx07wBK4YKh/fkA+TpWOk9V0PIpT3PqPa4YOrKEsxnmREdWdXyRxf:QtggYo/fkVTpWOkQwW5YpB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c36f68381f6b5d1e24269721a5a0a03_JaffaCakes118

Files

4c36f68381f6b5d1e24269721a5a0a03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 678KB - Virtual size: 677KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 28KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ