jeff the killer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

jeff the killer.exe
Size

13KB
MD5

a4ce1d84864b94a779f33fcc933d1f93
SHA1

1a63bd95851b027626350ebe6f307ed26c281ad7
SHA256

e16048aeb6a010f39a63c525b12bd4abf686d1adb57e5d3cc4f90d6346c51aa6
SHA512

fff4a24c882305c47cd886652e39c90b07e1de510dd22c90193e72bd89824424091840693921d6d2fb5ad1ac6d64f66589d3d12d7aa69d3f89e5f924e3da40b4
SSDEEP

192:LFLcaentmX/6T4Yzg/T0YmYV52SYu3hGWrGvaadrq8uSF3:LFLZenMCT4YzET0YmeoS33hHrGvJUSF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jeff the killer.exe

Files

jeff the killer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ