35a37949a5c7d1641e894eea813aec95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35a37949a5c7d1641e894eea813aec95_JaffaCakes118
Size

48KB
MD5

35a37949a5c7d1641e894eea813aec95
SHA1

50cb9cf1875c584e5946e53520365bd786b4e793
SHA256

2857d0f7424b97c6a23e5771e2f3d2418804292d59ec64794f4c91fd7828dcfc
SHA512

dc68f85b6959827a1726c69542f51a541445c7d4aff792daac1e2c11925b8edef2b4704cbbb89796bef8ca0cf19672af542840fe8ce5f74dd516d71be008070c
SSDEEP

1536:aCra/u6+n+IjelYXuamxiQ23vQBneZBk+Zu9u1z8:tra/u6o/j4YeamxiQ234B68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35a37949a5c7d1641e894eea813aec95_JaffaCakes118

Files

35a37949a5c7d1641e894eea813aec95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ