27ff41c2c1997e281a44a166f018ada1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27ff41c2c1997e281a44a166f018ada1_JaffaCakes118
Size

175KB
MD5

27ff41c2c1997e281a44a166f018ada1
SHA1

8d5e07fcf56207c0601aa57e253823e8f2f18879
SHA256

4435d3665d32c262aecdf2e629087bd46ddd8a196c5ad4f0ff9f56c5087cb166
SHA512

ad4acdd9b6e05d7af7a548f2f5a6891908d39febaeeb718ae6a6a16a190ef1a587c19aad6ed29ab1d945af197264cd4776c8690bfbeaaa757c708595de10455f
SSDEEP

3072:upjZTka6Jkx8dczR0LxfA7LenP41OgiSb9a2xVawqTQmIZSz9YKsIK/2nVKF:kxkP7fA2Q3/9a75TQmIZSmKvK/2VKF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ff41c2c1997e281a44a166f018ada1_JaffaCakes118

Files

27ff41c2c1997e281a44a166f018ada1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 458KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 331KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ