e036cb52d41134140e494c3428c8ae0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e036cb52d41134140e494c3428c8ae0e_JaffaCakes118
Size

369KB
MD5

e036cb52d41134140e494c3428c8ae0e
SHA1

3a490cce85350f86bc3fe8c0adfd6506f7c7c430
SHA256

4e499f8c5eb4b60113c815e618fd316ec6adc461d98e100c90a4fc9325ef8251
SHA512

ad22f812f20e2bf9f7fea39226afbfb1a8d531a0259dc7f6280fd00c080ae240383118f7bbc5e6621ef7e430287dceec0cec7a8da50aa38555870a7c836d28ef
SSDEEP

6144:VcI6FUfk7vxQUdHx+YwxxAxcaJJxNFHY9KSU6Nv2tYHns3mrH2In0l:f6yfkTxQwxVtXxNINetYHns2aE6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e036cb52d41134140e494c3428c8ae0e_JaffaCakes118

Files

e036cb52d41134140e494c3428c8ae0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ