35c89897a18a55b4ca46d3099f391bd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35c89897a18a55b4ca46d3099f391bd2_JaffaCakes118
Size

441KB
MD5

35c89897a18a55b4ca46d3099f391bd2
SHA1

7828f11bc7463c09a52a458dd5a9ca17d954e41e
SHA256

76bec49432da8cafd1313d768b4773c84f74a34e4c8f70c6ddddad54914f85b3
SHA512

37b3f5adc18b6db7f957b86c16f000d709843fce5f019352577aebe91b799b302eb80611b4623afb3ff0d73e79923a5f5116d300369f001cc1bce06ade4bf9c1
SSDEEP

6144:5PtRx5gSdnGq2edLh6h5GSkGR82hhh7oWOqFcOkjISIbAWWmzrj67d/vklaF5F:RgwnGq2Ccj7+mh7OjZI0mrj4dCaF5F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35c89897a18a55b4ca46d3099f391bd2_JaffaCakes118

Files

35c89897a18a55b4ca46d3099f391bd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ