36c88b431d08b84cd4e92b6f21bf3cc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36c88b431d08b84cd4e92b6f21bf3cc4_JaffaCakes118
Size

9KB
MD5

36c88b431d08b84cd4e92b6f21bf3cc4
SHA1

6fd53412cd903c87b2fa321a6620c99a83b382a0
SHA256

2d911e42590de7a0edc94c5ae0cde1a0e873380b5584ce5e8f077dc9d669037e
SHA512

c3b9e87b0178d4eee93c6aca7da2f5a760ddad8adcbd8425606d503721e58494148f3e3cc6ff2ce67419f49cea3f673f6bd6012f6e0e6206dd89f1a92c9a9ff9
SSDEEP

192:3Bksuzm6N7oy1z9+eMZZ3k93VnjdwqzWD3Miv:n4xr+eMAFnhwqKDT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36c88b431d08b84cd4e92b6f21bf3cc4_JaffaCakes118

Files

36c88b431d08b84cd4e92b6f21bf3cc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ