36793960e920fc48509e26d7df34f0e9_JaffaCakes118 | Triage

Sharing

General

Target

36793960e920fc48509e26d7df34f0e9_JaffaCakes118
Size

2.7MB
MD5

36793960e920fc48509e26d7df34f0e9
SHA1

b2f98f6f4e1b3a0257e4e8b3ba87f8368521bd81
SHA256

629f4c95a878c67c4b0a1baf71ca6ee14b636708dda759908a62a9116e7368a7
SHA512

8744f214d452522d8aed511449a61fe3b4a21fb94439e24864d8a882dd5c6c7f4142c1e6df862942e6b234e1ca2ea954b8882d9db55ad509b09c8fd235bdbddf
SSDEEP

49152:E7FwwFTMwnZwPoGf2Lnvd6kIsh1cjHf6VcW0EPW:E6w5MwnZwAGf6nl6kIsh1cLf6V6EO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36793960e920fc48509e26d7df34f0e9_JaffaCakes118

Files

36793960e920fc48509e26d7df34f0e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 428KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 372KB - Virtual size: 613KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

..
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE