36b49678b53209904f3e08b910d7e38b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36b49678b53209904f3e08b910d7e38b_JaffaCakes118
Size

52KB
MD5

36b49678b53209904f3e08b910d7e38b
SHA1

70d2c0c6876c1a1d15bd10ce0755596a0f537de4
SHA256

6d9f3d52f84da0babc974519f1ce24553601ef1e64d985a1d1a2df689c7505f1
SHA512

3c9c4b40fe75f9b29390773b0b08c2214acc6a5604cfcd64dd3f7a44934458468d377775957fac4ad01cda73228210f3f292ed648c2f2d1af6a6067783f796e2
SSDEEP

1536:sEXoqQmqKkO+3igl4V37uSOilWMPGx9q7:CgC3igmV3SLuWMOHq7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36b49678b53209904f3e08b910d7e38b_JaffaCakes118

Files

36b49678b53209904f3e08b910d7e38b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ