0eb4cf9a6579c948025ef56e9d8882a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eb4cf9a6579c948025ef56e9d8882a9_JaffaCakes118
Size

174KB
MD5

0eb4cf9a6579c948025ef56e9d8882a9
SHA1

d34fe3a1268e4957e3417633665df9eee440f9a2
SHA256

6ed9d18af420610a19e4a3fcb538996a8577091dc942171aedcbcc93f95e79f2
SHA512

a854327058867318d68948d8b3d326d72a11a6359610150f5fe13d320dc8aad24597401bc3bd7c6f147e74b23890cbd9c9d635081ec19960c5a28afc736d05cf
SSDEEP

3072:+2/Hhxqfu1tGy71YMu3c+b94cB015yMv/dmEbKSHOB4:8Y1YMaBJy1RlVuK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eb4cf9a6579c948025ef56e9d8882a9_JaffaCakes118

Files

0eb4cf9a6579c948025ef56e9d8882a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dell\Desktop\maria.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ