36fbfe4b7ccf635864cdefb0a1862efe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36fbfe4b7ccf635864cdefb0a1862efe_JaffaCakes118
Size

626KB
MD5

36fbfe4b7ccf635864cdefb0a1862efe
SHA1

087fc6be1bcda16083f56f8da9e259d407761957
SHA256

02e4d9c1183a564a6b38548236a26b558de8004ddab0283bb1f0f1a0435cafa7
SHA512

cd22089946ecf2172c51c1ca787648d777f7143a550bba2b9955737251630134a12e39b4dc23c645aa04a7dba63ca918e8c9fc7bc6c79948183ee7df17966544
SSDEEP

12288:T7MnF29jgYSHZ9+aUy5gWbRdmvqBy4oWa4WmQIrXGjWfJS2nJFLlM:HMg9w59+cbzvQ4va4WmQEkGPJFLl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36fbfe4b7ccf635864cdefb0a1862efe_JaffaCakes118

Files

36fbfe4b7ccf635864cdefb0a1862efe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 538KB - Virtual size: 538KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 23KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ