35d9b30d72bb1e699ce26f56605ddb9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35d9b30d72bb1e699ce26f56605ddb9b_JaffaCakes118
Size

205KB
MD5

35d9b30d72bb1e699ce26f56605ddb9b
SHA1

a604e5eb000f3c351d2500217391a83955d97be5
SHA256

7fa80df35c5c1e8bdcb2e0b4eb5ed2ea3f9dae06f041064f234bbd1a5b93a5a8
SHA512

eaf241f10fc5d881769a7a5b0fd784ee459eba06007b2e2758700c4079489edfae99fec5f7f3c3e60f0ed2253cd404dd0daf79e48a1971d86c2f18102cd6ef33
SSDEEP

6144:xv93u1/JGb488nM0gjLRUTorEDVmd6bEZPlGbzPbW/tf9RE/:v32Mb4R3g/6Eri0CEZMbzPbWm/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35d9b30d72bb1e699ce26f56605ddb9b_JaffaCakes118

Files

35d9b30d72bb1e699ce26f56605ddb9b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mnmsrvc.pdb

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE