27fdca9cc2915a63f9dd4136d3f7b8f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27fdca9cc2915a63f9dd4136d3f7b8f9_JaffaCakes118
Size

10KB
MD5

27fdca9cc2915a63f9dd4136d3f7b8f9
SHA1

ae505de4a29e567a4cfe742301a63b7ff0531e72
SHA256

c3619af874f8cb4bcee85d53754ef684be9b8c5ade2d4d580a3ccad50e35c074
SHA512

f04ab3b75ea8a8ca1e265bd4afcce37fc4735fbed81aed7e45839f49c2f7452153d24575717a1bb8eca5b4f455a25168e1e3d7fecc121b607a2fb31bbd49f9f0
SSDEEP

192:ByqIz6/mI2vSPQBq3shgg9u4WituAm4wzCePODHHQu8ue:uz4mVvSWEshggEfTLWePODHj4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27fdca9cc2915a63f9dd4136d3f7b8f9_JaffaCakes118

Files

27fdca9cc2915a63f9dd4136d3f7b8f9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ