27995188901b199243be270c69f32511_JaffaCakes118 | Triage

Sharing

General

Target

27995188901b199243be270c69f32511_JaffaCakes118
Size

74KB
MD5

27995188901b199243be270c69f32511
SHA1

c7409c4bae6f03ea8aca14e5c451cebb27724ed0
SHA256

6f194457591e38ef91c704ee2e78d676158721b7123c5d6f1f7ab893525c1d0f
SHA512

0c263a3401c4033de5383b33c2b10ae36fa1491658ef1278d98f39d68eb2ed421e2253fe374aca3e5691da489d09682adcb19587d679981d1e81ccfc0d1736e7
SSDEEP

1536:0ItYxDHck2fKhIFcPKI3K/jzH3ZhWzoqxXKz1h:0I+xzfJ13yzpYzxx65h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
27995188901b199243be270c69f32511_JaffaCakes118

Files

27995188901b199243be270c69f32511_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ