JaffaCakes118_27e133eb1edec33814195b10b4b1945c | Triage

Sharing

General

Target

JaffaCakes118_27e133eb1edec33814195b10b4b1945c
Size

1.5MB
MD5

27e133eb1edec33814195b10b4b1945c
SHA1

9f3a0a3eab9df03aba7f50978999d2cb13cbb6fd
SHA256

97e43c0739f2320145d96d721f28344ade5a72266a193fd68427949a2437cbde
SHA512

9e487399cee11e08550532e0e5e8b1c1f261db151eb0dbfd48860c7eb898e8aa22f36e1cae4030fc71c18a99d796c309ece609339d751419de4202795dd4bd9a
SSDEEP

24576:kfeNN/bzZroC3cTuEBfP5pF4tgSdekQKw2P21M1L7cV95FxrM2pcPIt5Wx9W23HH:yef//Z53cXfhctq9Kw2PPL7cg2IadyQa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Xtreme Free Commission Bot/Xtreme Free Commission Bot.exe

Files

JaffaCakes118_27e133eb1edec33814195b10b4b1945c
.zip
Xtreme Free Commission Bot/Xtreme Free Commission Bot.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\AppData\Local\Temp\2\UBot-Studio\SethTurin-UBot-Studio-cba3329ea756dd3dd9921a412efeb61eb15f7753\UBotCompiled\bin\SmartAssembly\UBot Compiled.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Xtreme Free Commission Bot/sample csv.txt