27173e0479657d326ce969d924eb6ecb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27173e0479657d326ce969d924eb6ecb_JaffaCakes118
Size

1.7MB
MD5

27173e0479657d326ce969d924eb6ecb
SHA1

45030c7718611a556add22468df1d2fea17c1531
SHA256

0c6b70fc0d09706582085b08d629b197dbeb3fbb0d7b01d81ce4000f820cb3f3
SHA512

6c7acc4ef08d43858cc445d5e83c205c3835a8a7b88038635658e24d4ec8ef76fbcd2d785b2c24ac0f67ad355a1da2e817d53779b868cd6bb6cb83b606f34769
SSDEEP

24576:85QIzHyuhiDyrPk4hskDyZV/33nrmL0aCkfiUqaapfdXT9vOWFJTKTs7KezFTuYk:85p6iPH4V/37S0az1apFTRtsksYq9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27173e0479657d326ce969d924eb6ecb_JaffaCakes118

Files

27173e0479657d326ce969d924eb6ecb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ