36ca67ae8340b33320e63c8bedf5ced2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36ca67ae8340b33320e63c8bedf5ced2_JaffaCakes118
Size

2.3MB
MD5

36ca67ae8340b33320e63c8bedf5ced2
SHA1

369a0d099ce6762a375544259c574b85ba193fe3
SHA256

ef25d5c26efc888735593641dd114775750f74d026ad27c308cfdb41ac7c9bb9
SHA512

19b5e34c3cb67fc8a24f6912af7f1b39c300c8ef9eeab47efb1899068e34937755d8ee51ff46223e9cf3548fa12218ba6ac1efdba59d5c0e00cd4c3760372f5d
SSDEEP

49152:4YvLABFyRSPIxo1+HPX1Yi5pOzpv6VBsbtzCT7WJJwmJyO7KMxZ:4YvLABFykPIxoQHPFYi5pUpv6VBsbt2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36ca67ae8340b33320e63c8bedf5ced2_JaffaCakes118

Files

36ca67ae8340b33320e63c8bedf5ced2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ