36bced2c107a769e794a4090700e2ea4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36bced2c107a769e794a4090700e2ea4_JaffaCakes118
Size

14KB
MD5

36bced2c107a769e794a4090700e2ea4
SHA1

7cd21feca84449189cd7c8cfc50ffee8de6419c9
SHA256

a2d082a4c4bda2be4de4105e335469640a741df709256c6bb8f7fae1628d7de6
SHA512

692bce260302ba74037142464e8a205e9ae51fba6453074a601b3219fc27e2f7f095abe50d99e08b7ae23af327ad861f60f698a613ed0043a5b5fa9bbdb89267
SSDEEP

384:QUrPZof8ZGQ6kqjnLCQiFHtzjX07XOpLJIC:QUrBE7B8Htzg7IJh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/040bdfe37fe4444a4cc6a7848a8c2ad9

Files

36bced2c107a769e794a4090700e2ea4_JaffaCakes118
.zip
040bdfe37fe4444a4cc6a7848a8c2ad9
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ