535afaad36279b7c917081864daa9875_JaffaCakes118 | Triage

Sharing

General

Target

535afaad36279b7c917081864daa9875_JaffaCakes118
Size

96KB
MD5

535afaad36279b7c917081864daa9875
SHA1

5d2aeeabb8c5980292317224a45ce38358de3d5a
SHA256

bf20ee78d55d678fb488f382f5d592815b2fcd98033dc3db60e52eb355c2dddb
SHA512

cc7e58669863f321746833cae23e0b8c37b49fcc81317a7496d4ed2ac957203ef5a159efbe0fa895dc81c129cb9a6946bd9682185424bc85cb3f8e516f3c2262
SSDEEP

1536:U3qRLK2Q0BmWERGpN8ghMdAxHRqIQGBk++mEsUA6ACSkDTJAkA5de:9LPT1kGv8oMdcxqICRvAyGkA5de

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
535afaad36279b7c917081864daa9875_JaffaCakes118

Files

535afaad36279b7c917081864daa9875_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ