35af0abda6e439c7c8690f33d38c257a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35af0abda6e439c7c8690f33d38c257a_JaffaCakes118
Size

521KB
MD5

35af0abda6e439c7c8690f33d38c257a
SHA1

61250877967fd4da8f1db64ae667ffa20e537880
SHA256

c8fd3cb250590e7e63d1cfdd75048a128c6e7fee108993640cd9123780072f45
SHA512

2fd0bdddbc5de1a5a3c7bc7f7e6323dd08be88742db7561259e949174977da95c534f9a2cff680031549cb2372304441d01bccac90977f7f1d2b7f34c750b02f
SSDEEP

12288:VSXWhbOWlSnkH/nCfKCDLu39/bCjS3a23wOMYyKMtY3:1bCnkHvCfhDLu39WG3z3wOMkZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35af0abda6e439c7c8690f33d38c257a_JaffaCakes118

Files

35af0abda6e439c7c8690f33d38c257a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Hudson\workspace\Release-2011.05\checkout\rc\MOD\rcc_host\Release\clienthost_u_u.pdb

Sections

.text
Size: 440KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ