e4b803b42eae0713404868a8f745c9cf_JaffaCakes118 | Triage

Sharing

General

Target

e4b803b42eae0713404868a8f745c9cf_JaffaCakes118
Size

964KB
MD5

e4b803b42eae0713404868a8f745c9cf
SHA1

93dfdd64149dbf20134dac70fcd806e5f41b4ae7
SHA256

5a66764f2e1586ac36f0046ff98e0e45b72801a67110df4b86ae7ae8dd21b781
SHA512

9f7797d6eff8f7575b16a9afcbca77b48597eedd8f0a2013b5d656668f4721e7e4bf243ca9829fd9b5f001205b98bd870baa82f6c270510bf4b81e1430a8c8b8
SSDEEP

24576:F806+lzHBIiDJS6wkfHi/vm93i7P+d18nDTcwxkXAhVH:F8zIHpi29ya1gcwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
e4b803b42eae0713404868a8f745c9cf_JaffaCakes118

Files

e4b803b42eae0713404868a8f745c9cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Callum\Desktop\Fibre\Yellow Skull\eppy\eppy\obj\x86\Release\ProjectB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 879KB - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ