f603de9b51daf899422d404a9608f503_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f603de9b51daf899422d404a9608f503_JaffaCakes118
Size

3.4MB
MD5

f603de9b51daf899422d404a9608f503
SHA1

c700c8b3563d46df03618642484a30e80be188e8
SHA256

54f3c83c10e343ff75082ba70168d431be7d48a1cb353b578947fa3bc03153fc
SHA512

0e7e572e69ba8446a786a926d8e9c01d7e3a5ac71d3e2e62d5ce0eec3b4a11a2b4cd33535e48787ebc30a0d87a965828c51d03630a13961121439047e6871a18
SSDEEP

98304:QVQqDhI17v1FJ+SNesYZetu4bq3PDQhqE4RE:QGYhIlSZJEmDQhqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f603de9b51daf899422d404a9608f503_JaffaCakes118

Files

f603de9b51daf899422d404a9608f503_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ