27324fafc77d986877b8fc535ffa9b01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27324fafc77d986877b8fc535ffa9b01_JaffaCakes118
Size

936KB
MD5

27324fafc77d986877b8fc535ffa9b01
SHA1

f874a51c35dc768654ea04e7a5313b430a6343eb
SHA256

f99c69161bc1d7b412fe0248731ef504625df24cedb8d3d10821589a38e05af3
SHA512

b7506489915d36692c5cc22d7c3c2b957de094cfb13ef28ee9798ae8511a0e4b6d2ab23881cdb85f8f6663db9033255ae1941d1942ed8d27cf18618ec0d7ffaf
SSDEEP

12288:xzsH3D67GH/atas5DXcvFimd4100QGV+g/XlaITjhBXmF/PSdgGrwfB+owkrel3I:8G6H/pQsv8bTHetmVrT4ZKLPOXy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27324fafc77d986877b8fc535ffa9b01_JaffaCakes118

Files

27324fafc77d986877b8fc535ffa9b01_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Configuration.ni.pdb
System.Configuration.pdb

Sections

.data
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 804KB - Virtual size: 803KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ