36bc6c2350c5f967baf71ca81de39689_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36bc6c2350c5f967baf71ca81de39689_JaffaCakes118
Size

270KB
MD5

36bc6c2350c5f967baf71ca81de39689
SHA1

02e804e7b597c61f464f961c5cf41e99cbb88877
SHA256

717f124be70c678f21c132962799d870c7b5ddfb6e89e0f4c9e665722c31ecb1
SHA512

ee19b5ba521c74226921ea60fcda75a1cbd77c9b06affdcb367bc8bd04e8425ab93ccc381151cb980e6db5168f04e9f7c2d93829d50d74aa71136a1ebbcd37b9
SSDEEP

1536:fQ7bXHddIRZyHKaxc7P0K/iCAim5JwQnygQcQU5Zt3XyxDuKdgPhiZ1+nnyVpdH6:fK8Z4R4v/iCZm7tQLqtnyKJ1nyVvH6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36bc6c2350c5f967baf71ca81de39689_JaffaCakes118

Files

36bc6c2350c5f967baf71ca81de39689_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 1KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

wdlecsw
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE