35d9c5e063ffd328afef41a8616515c0_JaffaCakes118 | Triage

Sharing

General

Target

35d9c5e063ffd328afef41a8616515c0_JaffaCakes118
Size

315KB
MD5

35d9c5e063ffd328afef41a8616515c0
SHA1

79c1cc2cd6ccc577a433d0a90596857deedee26f
SHA256

8a0f66cf9fd28152414c22fd3c02ead4b1de4f2c9202362e240f3e4b82d5e6cf
SHA512

51eb9022cdd9b1b585e0749cfde65505c9ef1c712ec7dc296cb07df5656ba064cb1ccbb7faed9590714a0645cc48a097b5b7496130b7d1198263dd8ceafec028
SSDEEP

6144:/2dMQRcK0FZXpPbMODGi06pngMHRlaJ3rFRpZkApuyA4tGpOyY:nQRaHPwAGinBgMHWbFbmKtA4tGm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35d9c5e063ffd328afef41a8616515c0_JaffaCakes118

Files

35d9c5e063ffd328afef41a8616515c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

t:\delivery\x86\ship\0\ose.pdb

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xur
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE