0e1b000c5b04f2be0177560efb1f06d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e1b000c5b04f2be0177560efb1f06d6_JaffaCakes118
Size

377KB
MD5

0e1b000c5b04f2be0177560efb1f06d6
SHA1

16622901757f466a1283e949f56b1fffdb7288a1
SHA256

2fc496df5e146cff007859a6809f40515e7eff1dacbaa54a346392845b1e430f
SHA512

f572a1f4e294ef6ea0f0a691b09ae40843a5c620cf96b56a573c753d34ad1ef00de9076ce30686f197c52b5eb51e625e9a3591c3052449e61ebc375b40b7cd44
SSDEEP

6144:DsfFU9oUEuPXGdFFFFFmFFFFFlrrrrrr3rrrrrUrrB3ljMrHP:DsfePnrrrrrr3rrrrrUrrBZMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e1b000c5b04f2be0177560efb1f06d6_JaffaCakes118

Files

0e1b000c5b04f2be0177560efb1f06d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Magic Melody\Desktop\Settings Cleaner - Source & Binary\Settings Cleaner Source\obj\Release\Settings Cleaner.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ