636a27c6b2f608ca4cd2cd83c3246e0c_JaffaCakes118 | Triage

Sharing

General

Target

636a27c6b2f608ca4cd2cd83c3246e0c_JaffaCakes118
Size

702KB
MD5

636a27c6b2f608ca4cd2cd83c3246e0c
SHA1

82b4da519854269bb45ea14a1624c05cd4b4a497
SHA256

33b2ab663961e24699fd73d142a1148303a5e9e1f84b9147cb9afe96278ed5ee
SHA512

dac174ae7e2922457a6cfe3f2c815ee25cf9207697f76eb01616dbad441d71fe774887cb9ea3569d99c54929ed218a6342558a70a18b0b7e520c8d4853630e83
SSDEEP

12288:jRycOktU4g/n/t0EW5A0z/FvJwQ5oalK+Gh39Mva7Ik61QQ52LwRg08y5wj12d:dxJU4gf2EW5A25Jr1kD39MvmIk6d32

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
636a27c6b2f608ca4cd2cd83c3246e0c_JaffaCakes118

Files

636a27c6b2f608ca4cd2cd83c3246e0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ