27e4688b8018a08755015f648dca6d03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27e4688b8018a08755015f648dca6d03_JaffaCakes118
Size

1.9MB
MD5

27e4688b8018a08755015f648dca6d03
SHA1

e30d1c7db308e5b8ed06a0084b76f88cd1b56d90
SHA256

52e3d71b89ff23ac80820e9c5245b88f318fcd52fe817f7dab2aed919cbec4a1
SHA512

1181a177ba0e78dac638bd547898adbcd69bf6c428841ab9be2d9ab186fca22f018556643b8d739c92c5f90c58dbc1aae9961ac296312b6eee819b4ad9c37945
SSDEEP

24576:vbW7vJy1tjoZVjPEXhB7xpxZ2Do1m2I/5eIBSynZQcV3xexhHPuqLy/k6gOn2FMs:jqoKcB7xjI/5YGQkBexhGt/gdMs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27e4688b8018a08755015f648dca6d03_JaffaCakes118

Files

27e4688b8018a08755015f648dca6d03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1019KB - Virtual size: 1019KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ