e17c03b658f95cfb0911f6137670e971_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e17c03b658f95cfb0911f6137670e971_JaffaCakes118
Size

1.1MB
MD5

e17c03b658f95cfb0911f6137670e971
SHA1

33abbf9846b6b85480270fb3f8a427fdd4b3e274
SHA256

8c80763bf14cd5c4edb890c0e2c6f6be7515cf1775dc3a914c662b5d95d15bb6
SHA512

2cf678cbcd17964f09cd38c3d5b3b72324057fef695bcf0362cd97c222a789669d45132e5569f37f79f4df810dc58728ae73d43a6f3f41648c1b29978835d730
SSDEEP

24576:2M8/V06+lzHBIiDJS6wkfHi/vm93i7P+d18nDTcwxkXAhrH:mVzIHpi29ya1gcwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e17c03b658f95cfb0911f6137670e971_JaffaCakes118

Files

e17c03b658f95cfb0911f6137670e971_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Callum\Desktop\Fibre\Update\eppy\obj\x86\Debug\eppy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 941KB - Virtual size: 941KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ