27aa990961b25781015f2e72d99b6314_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27aa990961b25781015f2e72d99b6314_JaffaCakes118
Size

792KB
MD5

27aa990961b25781015f2e72d99b6314
SHA1

8bca012220d9f91f817257b3c223c46a9fb708d5
SHA256

ad18229f796ee32a96fd88412fca3bd53704d68b0e344003f284d229874378eb
SHA512

edbb306695c5b28817daef3452cc65569da70871f2a085bb392412c79b5772d9923fd4edc00fa57e189c86eaab41ccf80431d53acaaa9e97afd23be909a992df
SSDEEP

12288:J8vOMNbhmqih02131cCNiWV+2EYVC3xryQBRN/9nwAQavpPw7T8OemCn5G13HPcj:QIUwiP9lZ50k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27aa990961b25781015f2e72d99b6314_JaffaCakes118

Files

27aa990961b25781015f2e72d99b6314_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 780KB - Virtual size: 777KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ