27c17e3b1111fc5c3d4f6d779b15d4da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27c17e3b1111fc5c3d4f6d779b15d4da_JaffaCakes118
Size

165KB
MD5

27c17e3b1111fc5c3d4f6d779b15d4da
SHA1

c9e59ecea09c6f48bc89ec217c773d9d8638e12a
SHA256

2dde31dbb7090df38972b3d577d71c16b799e5d1f58d6bdc0fad0b588f4dd886
SHA512

697bafc39bf40501738933cd5b08b51893d8acf9fdc8d41ccc6f281d7c15f3d42147b1fbd2779554b4494a5b51f56f49d934b94cfadc87ad985b2be01874818f
SSDEEP

3072:qYz6m8cvQbvPV4OHtNwxayByTyH/4sSOGRV8MPX8:pMBrVBPwZfc5QM0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c17e3b1111fc5c3d4f6d779b15d4da_JaffaCakes118

Files

27c17e3b1111fc5c3d4f6d779b15d4da_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 47KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CRT
Size: 45KB - Virtual size: 634KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ