35d2e65403be47b5ef97bba29bdc6d63_JaffaCakes118 | Triage

Sharing

General

Target

35d2e65403be47b5ef97bba29bdc6d63_JaffaCakes118
Size

487KB
MD5

35d2e65403be47b5ef97bba29bdc6d63
SHA1

1306b58e5f21f11951a3e387d0186f021f6fb85b
SHA256

ec3c27b93f1396b031a040bf9e8d3d434e69efecdcce418a806a903c84591df2
SHA512

2e4588cc51337fe44db4fa6a5ae04b86e6e03c3e39f896742e5d66d69da745dfc50236711689526f23b69280063077c1d2b7aef259d127deb9b66d048589853b
SSDEEP

12288:N97hFA5QLGqNTSllYzA0Rkys9PXeuWwge/wrfXaL7+kMzXBc:NStHIRkyswuzgeqfXaL7+kMDBc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35d2e65403be47b5ef97bba29bdc6d63_JaffaCakes118

Files

35d2e65403be47b5ef97bba29bdc6d63_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ