27eec3db0687fc917455b4286bb96cd9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27eec3db0687fc917455b4286bb96cd9_JaffaCakes118
Size

89KB
MD5

27eec3db0687fc917455b4286bb96cd9
SHA1

2a5561caf451c9c456151ee4329929b4dce6a0e8
SHA256

77b2e0acead9898a0147473316af6844fdc2d833b34ed5c0264d781b32d8abdf
SHA512

6582eb1661dd8530e23b686d3b76969bd57680d80135a1eeda3cd7a9e6d640c59866f25d82754a38252f52bc441a1326ed9abcd67a18bd12599e2672022168e8
SSDEEP

1536:ZxJ/UblGuKOsKuMVp6y6ijrK46CweMrGhNuUjeVH6VinxTjRGKD:3JYjnU8p6y6An6jxTjRGKD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27eec3db0687fc917455b4286bb96cd9_JaffaCakes118

Files

27eec3db0687fc917455b4286bb96cd9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yingzi
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ