36d8d32ea6de0396d27dd4e5ecf2a68a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36d8d32ea6de0396d27dd4e5ecf2a68a_JaffaCakes118
Size

10KB
MD5

36d8d32ea6de0396d27dd4e5ecf2a68a
SHA1

35b5556fe177c4b0b6be18e5c1666b9b77bcbd9b
SHA256

d075f701f2db138c78d353fb9ac28a066be94362924fab7f9d0d7a1025eee330
SHA512

5fc7b4cc3953b65c2dfef9659680115fc464c70133f7f6b6ab09446d082dee104e8be248914658b35a0428669515d05d9cf1a4194386f40aceac8dcdc6f8b2e9
SSDEEP

192:QSkRXBRTg4GH8omaCQMXoYIL5phwK+VeWI550VXiN2a:f4BRTg4GRmrQMXoYIdp6VJu0VXiN2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36d8d32ea6de0396d27dd4e5ecf2a68a_JaffaCakes118

Files

36d8d32ea6de0396d27dd4e5ecf2a68a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MAIN
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SPLASH
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 410KB - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ