35110443c9d1c0fe861d5cf19f1a9961_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35110443c9d1c0fe861d5cf19f1a9961_JaffaCakes118
Size

38KB
MD5

35110443c9d1c0fe861d5cf19f1a9961
SHA1

5018dea4136403f1fd89dd6589fdb78c127d9ff0
SHA256

7da361e91b19f96b087c0b833a5bde173fdfc03111ab0dc44960e1d7e08487be
SHA512

2882e7c8d56f3ca565d8134011c99b19bc85b9d3ace1c8fa646472167f4c6539210d53e9a3f4a4d127e95cb6a140dcdada9e9a58f28a5ca675a7f8b514707376
SSDEEP

768:eijGTMaaQP8NWp6EapLKx+sfO7m9pepF/DsyEsH3Z9GsXy:eijGI63pYKxZmlNEsXZ9hi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35110443c9d1c0fe861d5cf19f1a9961_JaffaCakes118

Files

35110443c9d1c0fe861d5cf19f1a9961_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ecode
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shield
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE