035eb193a62036184418e3bd0ebf71a2_JaffaCakes118 | Triage

Sharing

General

Target

035eb193a62036184418e3bd0ebf71a2_JaffaCakes118
Size

743KB
MD5

035eb193a62036184418e3bd0ebf71a2
SHA1

3e112109b3c4fbf53cd31d60d5d8f5704a8d44a2
SHA256

0f152e0b1f56e4f762ed64e4c7253d7b1c617a2771f3b41325537244c64ae0f3
SHA512

20081b5457a0ce7b053dd9c170544aa13ea3472659fa4c87563988dd4da06075e0383dccd1a786271abb6ab2511d6dce7b8320a98976b9f29497e4bfde93408d
SSDEEP

12288:QRn8S++U4u/n/80dW5A0zyo6JwQ5oAlK+GPsvZWIk9yQQ52LYRg08yPwDRSd:U8MU4ufxdW5A2mJr/kNsvEIk9Y3Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
035eb193a62036184418e3bd0ebf71a2_JaffaCakes118

Files

035eb193a62036184418e3bd0ebf71a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ