3f595766331dc946ab837d16f1e556d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f595766331dc946ab837d16f1e556d7_JaffaCakes118
Size

687KB
MD5

3f595766331dc946ab837d16f1e556d7
SHA1

5dd14ddb66d44cf67308c07ad742e332c5d2f44a
SHA256

e6007d8fbd589f9f30e85c85ca0eb96bcdf9b9cfead98a27c7916c7e6a498d3c
SHA512

d4f83c0c07e7cfa5debae10f654a6c2ce6fc284cd2a8e0bcb4de98ec12aee0a0baea243971755aca5b5027a21ceb6a00ead36ff2eaaed28c882b125366feaeaf
SSDEEP

6144:YyX5RmxkHEjyKPPPPPPPZWSMPoCOJNUEX9bwJNUEX9bIHNkJYTSJrmmeFxvMVspW:YakudPorJGE5wJGE5IBWmbUODIVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f595766331dc946ab837d16f1e556d7_JaffaCakes118

Files

3f595766331dc946ab837d16f1e556d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

QTq
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 670KB - Virtual size: 669KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ