35db3c22f63af8a4be660b825ece6d2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35db3c22f63af8a4be660b825ece6d2b_JaffaCakes118
Size

461KB
MD5

35db3c22f63af8a4be660b825ece6d2b
SHA1

1b6303427033be783957807a4a51d96dd617af94
SHA256

16acdbf54c3e6ff92330725e31cf53e4b201382091d01db32ad7b09d5ecf96d3
SHA512

bb23b3b9370a908f5215078c2efdfe224839755cc0317d565a820c65daaa3c2a0d74de5e9fde79cef81cb61e063d012030c79f00915a32af577de1f20a58f038
SSDEEP

12288:VshOPNFuJzZh5lzZh5DdzZhg3/ukZOAd/mJYFTsr3CsZc23te3dvEh2:+OP9mYF4rS+cytkEh2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35db3c22f63af8a4be660b825ece6d2b_JaffaCakes118

Files

35db3c22f63af8a4be660b825ece6d2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ