35cf92f81285945ec23c2a4ce9f398ed_JaffaCakes118 | Triage

Sharing

General

Target

35cf92f81285945ec23c2a4ce9f398ed_JaffaCakes118
Size

193KB
MD5

35cf92f81285945ec23c2a4ce9f398ed
SHA1

27a56f05f99c023bdd85aae7c5cb8f7c81562356
SHA256

100c7b494c1aa4afd5261e148f7a4fa7580098e074bbd81b9718fa07e80a34ab
SHA512

b85be69650a813b5510c68f9e3cf544463950c98423548f7ea2ece0353142a2f2cc0441913c6296c653a42de7142fc93fe362ddc318a67de757335d2a5caedf8
SSDEEP

3072:hUnLIj3Bo0UjQawEnDLMcpX8yRIt2XkiE98fQnGYaSq7mtkUJdMkPkgm7Wt:hOLIjRpUMOD4cBiQzEyfaBFVVD46

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35cf92f81285945ec23c2a4ce9f398ed_JaffaCakes118

Files

35cf92f81285945ec23c2a4ce9f398ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 433B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relo@
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ