e027257406da9b0dba17ca6c13b54ff9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e027257406da9b0dba17ca6c13b54ff9_JaffaCakes118
Size

681KB
MD5

e027257406da9b0dba17ca6c13b54ff9
SHA1

a77f673950cda3615acb194f6e5912ece21eb04e
SHA256

9300c7f1671179b8dc1e4707aaca84fbcd843131680121d50988746db44ce5eb
SHA512

836a23c162461135a704e6d135b1260ca85b8928f86a8f50eb182fc7b64961e292264c397d9673e2b6e2ca033cc2fbc0ff069bbaa5a912b8b7eaaf89175ea2e7
SSDEEP

12288:GqZ8xa9IWW5A2pR5nsBvHon1v82K2KJGeP6ECFlPToi5TKvvDgKD8JRUuAAgV:RmYIWW5A2j5nAHo1PKzJGeP6ECFlPMv5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e027257406da9b0dba17ca6c13b54ff9_JaffaCakes118

Files

e027257406da9b0dba17ca6c13b54ff9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CreateObject

Sections

CODE
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ