35fc3a62d1602d8f1ca030b7b4541700_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35fc3a62d1602d8f1ca030b7b4541700_JaffaCakes118
Size

545KB
MD5

35fc3a62d1602d8f1ca030b7b4541700
SHA1

a4b604a283185625620703da5e10270e3ae41b22
SHA256

ed28153cc0dbffd539818d219469bc58fce86491b59b92fe247d2f7e5fd23162
SHA512

5697ffbb4f08d041ca50a91b67f435fa266642de411dabef51635a7a1681feaba1281f185acb467bd037a3c437625641dee8f0f21978569fc9abcc5c0f6e5c28
SSDEEP

12288:Mbz7tP9gbUYHGNAxRRm3/d2gqexkjwPjBTXRaUlzp:Mvbgb5mNA7Q3/XhTNB1z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35fc3a62d1602d8f1ca030b7b4541700_JaffaCakes118

Files

35fc3a62d1602d8f1ca030b7b4541700_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 543KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xunhao
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE