63affb8e37058785a8a86f575f460096_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63affb8e37058785a8a86f575f460096_JaffaCakes118
Size

373KB
MD5

63affb8e37058785a8a86f575f460096
SHA1

5cee15a7136e198949b75a5df33579e3736bc1ad
SHA256

2617c3bdefd7faafff7867e61d5327f629533d2880b19f767a0ed1e5aaaec758
SHA512

070eeb705b7a9a5b91b30ea3267457551eb839f7efcace180a7d8bf536fcbe9a6bfc487aa5a08c1e8eb9daf87650c1da3a905d984d925c664046945f8cd598d7
SSDEEP

6144:U2Z1oUePpYvQDmeJHWx/SbCqygw2R51V8fMaPKnldSe7vrSTaWnAzQRi+GEfjUkz:Ce8L2x/ECqygHRrujPcnF7vOTRnAWfbP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/UDP Shells Fresh.Exe

Files

63affb8e37058785a8a86f575f460096_JaffaCakes118
.zip
UDP Shells Fresh.Exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Byte Crypter v2\Bee\Bee\obj\x86\Release\coddy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 852KB - Virtual size: 852KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ