438149612892a5428848ec87602f18a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

438149612892a5428848ec87602f18a3_JaffaCakes118
Size

117KB
MD5

438149612892a5428848ec87602f18a3
SHA1

1da7efd8cefd0a2049031cc9eb38a832e7d4628c
SHA256

6f390f0a618a96bf12b27efbd9a72dfcf005a94978414287351642312833f591
SHA512

c716b757d3c53bd91d1a18b2c4a09d0ae5fd10857e4c675dc10a358a9437a4646f63a770ef902f78d42fc344d67e51d7d9f7c5e08ed89ed124ea626214948fc8
SSDEEP

1536:gpBurMZaUY92k3z66oooood5eKbVi2hPS8WnfXb2C:gpBurMZaUY92k3W6ooooodnFxKfL7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
438149612892a5428848ec87602f18a3_JaffaCakes118

Files

438149612892a5428848ec87602f18a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\H4ckmebit2h\Desktop\Cereberus Worm\fileme\fileme\obj\Release\fileme.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 133B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ