27fb8fbc57278d4b8e52709f4f1392e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27fb8fbc57278d4b8e52709f4f1392e4_JaffaCakes118
Size

2KB
MD5

27fb8fbc57278d4b8e52709f4f1392e4
SHA1

3bb5c0fe8fb874658ffbafac725f102525934f88
SHA256

6c0cc1ebb21aa62b5512a153a481710bd03b955f25027f9cc7c2f3269bb86c88
SHA512

322c616efd91b9398b144f0192dc3dc9bf34880ad4d165e2bd05cfadd2e2f5abc68a64007c0da025864c89d4c8a0125ec16cbaa8af0c17f12b8f8b6fc8fac6a1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27fb8fbc57278d4b8e52709f4f1392e4_JaffaCakes118

Files

27fb8fbc57278d4b8e52709f4f1392e4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 958KB - Virtual size: 957KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ