03c98dc712a4e031e40ba3f866d52a75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03c98dc712a4e031e40ba3f866d52a75_JaffaCakes118
Size

483KB
MD5

03c98dc712a4e031e40ba3f866d52a75
SHA1

4e28388eb70356fde52702da610580c42002488f
SHA256

05b18d843fe355674bc83444c354030ed7682a941ccc9e00f67a6fb342e9c015
SHA512

3844f19895f1898602b496711892bee75a1ebc35097bd8a8e69cabac92050550f9eac7adfff78e4ab932b0eebacab8e46d91e3d0cbf38f5f3ad55be0588dbf32
SSDEEP

12288:+EYYmAaO9fNT2cABRd8THfDMJvIFF4Z6nHsjLMPVl0DgS:NYYSO9fN+XdqrMKFFLMa0D9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03c98dc712a4e031e40ba3f866d52a75_JaffaCakes118

Files

03c98dc712a4e031e40ba3f866d52a75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ