27033510119f5946a7c433d859eb4d6a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27033510119f5946a7c433d859eb4d6a_JaffaCakes118
Size

780KB
MD5

27033510119f5946a7c433d859eb4d6a
SHA1

76d77ae92b061fda7c73b56ad739566978ebad90
SHA256

b08280b682a6038a8fa5c31454c4dff9b414314e79ecf17c4a3c163cb8e40839
SHA512

b454f6c6385995a792e29e55d2dfbbaf40e4283f18ff8c4a2e9b8b42b0c6c2259ae99f8e5ac862f1f7c3efcb08f981cfc7dfb05f7fa8fa349d2bbc662ccb33d7
SSDEEP

12288:cu5JmtbtVQOUu5JmtbtVQvu5JmtbtVQ/6/:8UoF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27033510119f5946a7c433d859eb4d6a_JaffaCakes118

Files

27033510119f5946a7c433d859eb4d6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\My projects\Shomer\Versions\2.0\2.4\2.4.0\2.4.0.5\obj\Release\cvshost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 744KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ