36a859409e93d28a125df81d4c6d09ed_JaffaCakes118 | Triage

Sharing

General

Target

36a859409e93d28a125df81d4c6d09ed_JaffaCakes118
Size

96KB
MD5

36a859409e93d28a125df81d4c6d09ed
SHA1

2ec405f6c003b311888207e8bc1b9f0982b2f8ce
SHA256

e1f6511e3ccddd8f57949c3ab8bfaa6cbec2cc83f764eaa4293de2b882590e95
SHA512

42b606810c56ffb21f1a0adb60fe6925f96703461f92f112a4997f0b3d9ca45e8f9a882b4bb38042cb8bbb309399eac2df7b2b504ca16ab370c339e6b18cfd19
SSDEEP

1536:rL2SiF7b5fOTD7yX+O61/V7bUIL0Fd63/iKivMW3uBCbiY6TSfECVa:PfidoTD9O61FUILXiBt3jJ6TScC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36a859409e93d28a125df81d4c6d09ed_JaffaCakes118

Files

36a859409e93d28a125df81d4c6d09ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

AgtgbrjOnnqnnYkcb
Bwmlwjj
ZqIhjvbZuhc
YolTvlqjruNpmrbnk
MhoDglxcxvZsemedlXvhonldLu

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 883B - Virtual size: 883B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ