27974a6270efc05c6999144c316cfef5_JaffaCakes118 | Triage

Sharing

General

Target

27974a6270efc05c6999144c316cfef5_JaffaCakes118
Size

14KB
MD5

27974a6270efc05c6999144c316cfef5
SHA1

ed6bf53ecefabb7574c52cc182ecff9f89824364
SHA256

6028284e6166611ba9ee886bfa7fcb26bd9a5d752a06c1bc9c608eb5ccb5e28e
SHA512

7f86223cba074440de39a4b796837141f3b67d2d1bb622466f679eea1b32c0b72a42770a2461a2dfbba415ab9df7bcd4ab88c0fca086e5d78e5ff4ef9a022fda
SSDEEP

384:evcT+1WYbWFWuq2pfal7FLCMPLEXPNYzAyIK/6A:evVxlQal1DuFtxA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27974a6270efc05c6999144c316cfef5_JaffaCakes118

Files

27974a6270efc05c6999144c316cfef5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ