603e7f62ab163296b312ae76079ffc73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

603e7f62ab163296b312ae76079ffc73_JaffaCakes118
Size

2.1MB
MD5

603e7f62ab163296b312ae76079ffc73
SHA1

551b29649a19f6f15454813880f254b26cb629e2
SHA256

435f8c0a91dfda8f23088578fad9cdc17568486f1cb4d843b524202e166ac89c
SHA512

0525037f6349c939d4e6c4428a6903c508b02e21d12ef0756dbba9730873db390fff2ee3de4981c418116617156a5f23d66d2a29606e6d549fa32cea1eb8a85d
SSDEEP

24576:1XtDZJDYfWrmCBtXtDZJDYfWrmCBq0lz8:1XtDZJDYfWrh7XtDZJDYfWrhE0l4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
603e7f62ab163296b312ae76079ffc73_JaffaCakes118

Files

603e7f62ab163296b312ae76079ffc73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\STE\Documents\Visual Studio 2008\Projects\Text Converter (binderstub)\Text Converter\obj\Release\Text Converter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ