c27a0d36358fbca9e0c4345518f7db88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c27a0d36358fbca9e0c4345518f7db88_JaffaCakes118
Size

530KB
MD5

c27a0d36358fbca9e0c4345518f7db88
SHA1

0d984ab11d41c14c75becfcc564d1b24e610ac7d
SHA256

21396b12d44d8da9bb3879129cf4af364f2160027b94c7b840ed1084d2129fb0
SHA512

9ef662b58463f06bab494cf9194dad4b6087fbb9d081fee5bcc6d07a0585fa39ad09daf87e51e75b78eb2c0dad1bb5f61f501e8f04fb949c94935145dc76936e
SSDEEP

12288:t1hsK0ow71sI6yJO3rzzBRLEusU/7dyxri9Sr5GL:g4zz1/7IxrBM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c27a0d36358fbca9e0c4345518f7db88_JaffaCakes118

Files

c27a0d36358fbca9e0c4345518f7db88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 527KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ