f09eb149ea17c0d65fa9c3a86e9f8097_JaffaCakes118 | Triage

Sharing

General

Target

f09eb149ea17c0d65fa9c3a86e9f8097_JaffaCakes118
Size

263KB
MD5

f09eb149ea17c0d65fa9c3a86e9f8097
SHA1

65191d8cd2c80f51ac8056bc3f16702405263286
SHA256

520ccf4000f21ef3d77ddc995f69033eb6cd56cca589dcbb751438219b32f054
SHA512

edfc46f93802a5abeb18d55f081ecf5cff1ccf3915f0978980aead8b2b5aa615d68b2f2c6a82e7ff86758a8bbf661f9c6abd11ed4ca522955dbed6ab724fe099
SSDEEP

3072:2HCkJiq7P0R1bNQoraqs2q4e3Wo4e3Wt4e3WZ4e3WDfc/4N0R1bNQor:lkJiuybNdhs27e3me3te3le3fFbNd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f09eb149ea17c0d65fa9c3a86e9f8097_JaffaCakes118

Files

f09eb149ea17c0d65fa9c3a86e9f8097_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\İmtiyaz\Desktop\ViRuzzl0gger + Stub\ViRuzzl0gger + Stub\ViRuzzl0gger\ViRuzzl0gger\obj\Release\İmtiyaz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 169B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ