36eb150246c279e87f73e472f82a1f99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36eb150246c279e87f73e472f82a1f99_JaffaCakes118
Size

300KB
MD5

36eb150246c279e87f73e472f82a1f99
SHA1

47c0d245e50cf58d340afad55b0760e5466e902a
SHA256

ec922669d7f348270f5759c64930808c14ac488c044d9b9e7f7d48ba77fcd725
SHA512

d22e4fff2f0b8d17929e5ce7dfaf41acee4f316f61253c48dfb0e32b695cff4b0bbceee5f5f9c2f74b2dc44cf75ca7800919e43f812003de58f7fe5b535acea2
SSDEEP

6144:n//nZMhgI+ubNx9p/N7Z+7xgMT/4Gv2wRHkv5ju0XyeCvjXQ+Tj:n3nZMhJ+ubNtJZiXTAGv2wNSCJjX1Tj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36eb150246c279e87f73e472f82a1f99_JaffaCakes118

Files

36eb150246c279e87f73e472f82a1f99_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkh
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE