35de38428738786c81b166e58c0728c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35de38428738786c81b166e58c0728c8_JaffaCakes118
Size

588KB
MD5

35de38428738786c81b166e58c0728c8
SHA1

1d42b15ed809ddda590e76f3d7539339b9b3e051
SHA256

458797f100c8a5cafae1bfcc6b6590cb7261d56b1807de413e735f787ea6bbcc
SHA512

4101c4a7a89f28b55e0fdbf70ddb186a3b136b0ea075fcc9e65ab9e90e015e08500c90ae7ac0edd1377edcc777aa6350e57aa1e99ab1c106c3203786bf0201bd
SSDEEP

12288:S5UDehRBVwZ28uUmL2fxPZGV88sMzUZaxSr7eqN1v40t:S568R18uUmMLGTd8G6eqN1v40

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35de38428738786c81b166e58c0728c8_JaffaCakes118

Files

35de38428738786c81b166e58c0728c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 510KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ