35ae0534291a849710a50293c178e82a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35ae0534291a849710a50293c178e82a_JaffaCakes118
Size

546KB
MD5

35ae0534291a849710a50293c178e82a
SHA1

b442223687474d566b325ad57937f306f908f695
SHA256

946cf33c2ebaf5d88806d10d2c1619f240fbdbe35b98c644c581ccc0d3cc158d
SHA512

68fffa9722c1e4b103ce5815a453f65ac338c28cb659d1bfd5b1a78b60d1fd1d252ba7a75f419079b5cfe91510ad2e5b063ef4a1de1900590c8ca49099d0e058
SSDEEP

6144:D7kfwvA/bdKnSrAZ6CoB0mX3MiSwWu3B0jG4ZfD4I+xiQ+/iJ+AtPenYOrAca/ls:HkfEATgnSVd58OWu2i4x4rnJBVOdP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35ae0534291a849710a50293c178e82a_JaffaCakes118

Files

35ae0534291a849710a50293c178e82a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ