d36cf19e2a699436a644f0854af63a64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d36cf19e2a699436a644f0854af63a64_JaffaCakes118
Size

476KB
MD5

d36cf19e2a699436a644f0854af63a64
SHA1

45613079f526436754e90ccaaf129c10e7c5d9c3
SHA256

2c68b2c04d30281b41f25d9ef88142996b0e43d1f5dcfa91abe3d927fcdd4803
SHA512

bf3221cabb2e1b24b477768875d9befbcaa60d4550a8afa5b47608dd57fdda7d86223c78dcd5a11ca0edb21ac1de7860333971db477bbc2776d80fb30b5c583e
SSDEEP

12288:Lw+bMncsUGXOuccWWPVycWsNOKpVNFLBhTmrps+3y:Lw5ncxhuccddycXbNVsBy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d36cf19e2a699436a644f0854af63a64_JaffaCakes118

Files

d36cf19e2a699436a644f0854af63a64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 116KB - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Virus
Size: 353KB - Virtual size: 852KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE