0edef504bf9fbb1c92a764c6e97e57b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0edef504bf9fbb1c92a764c6e97e57b9_JaffaCakes118
Size

489KB
MD5

0edef504bf9fbb1c92a764c6e97e57b9
SHA1

2608e1cb2e2e1d5d0781a9d04e4d33008c5d5ea9
SHA256

9b40077276a6698a6804f4b63bd7687838b7807d12e555299e0339bf9a4f97e3
SHA512

43fac2edebfefbf1647b104ecba981acd22818dc3d2146ec963a0194da01d718ab7facb71cecb7bcf815b3ad03d685ad593e4ea4364c9a583c75b723f3afa48c
SSDEEP

3072:Uqr+p2gK9suXmy6FjThXCytT7Zap9qSffN5m9j3sZl3krL2y4weJhEQ/HhxqfuPM:U3QuZXpjhZlSHNk9Ala2dJpVMsx6ZDuY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0edef504bf9fbb1c92a764c6e97e57b9_JaffaCakes118

Files

0edef504bf9fbb1c92a764c6e97e57b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dell\Desktop\mrmandelef.pdb

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ