36ff34b0f46528e2820ad58c72274abd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36ff34b0f46528e2820ad58c72274abd_JaffaCakes118
Size

54KB
MD5

36ff34b0f46528e2820ad58c72274abd
SHA1

a73d7a187776a72649ba57872afd61e76bd54caf
SHA256

05d4d5fe8e8307c70b4b45f5ddd6bd7b187c89dc18440e0b0f1d95e768c6164c
SHA512

1355274ddd56bf5741b91371df05fa348893e0fe7a222fccbfa176fd698b1e2ba7209506c6d6e6e51514b5c5a667ca6abed2f4cf588a3d12bec1c1e80e603c9e
SSDEEP

1536:8H4q4z3TSSLg5ysezP4bWqyokFdeGP+kKXlWxxZ:fL3TSI5zP4bqosRmkKXsx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36ff34b0f46528e2820ad58c72274abd_JaffaCakes118

Files

36ff34b0f46528e2820ad58c72274abd_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE