27f6f1ee4381e1c50794cf78592f1ad2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27f6f1ee4381e1c50794cf78592f1ad2_JaffaCakes118
Size

129KB
MD5

27f6f1ee4381e1c50794cf78592f1ad2
SHA1

512013e5d4df9acd4fa3f4731a2a3d43f877bd1e
SHA256

d26da0d6e7f62ac9c509ad5008294d9dc4b210b818cf1dcf45334b7a0d9748fa
SHA512

ec4c8af98afa4653d55391ebca6449dacb5cc3a99489c97cf32dcc53ce7a93c756936b2dd2ff5c7db2bf0cbe544e5540ecb78a7e79263d8b48164992f62b01fe
SSDEEP

3072:YBrdhEm+U8K3+xA/qygmb8k6xAlR0mDX7+Cp0gULuvZbsuP7x:YBro5U8K+aqyg/kLPDXCgyu2u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27f6f1ee4381e1c50794cf78592f1ad2_JaffaCakes118

Files

27f6f1ee4381e1c50794cf78592f1ad2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ