27c02e8d502ef7e4e52ede02acf703f8_JaffaCakes118 | Triage

Sharing

General

Target

27c02e8d502ef7e4e52ede02acf703f8_JaffaCakes118
Size

59KB
MD5

27c02e8d502ef7e4e52ede02acf703f8
SHA1

0a51ea215a9f6ccc10a7c3606c942dc224d3e6ae
SHA256

cf48e8908d590d9fcab4d7e56814b74dddcf645f6acafdd6024f278f00a9154c
SHA512

ee6e37f7e5879eb64243f37e8abd8320249810db994fa67ea7ba7d11b0a2cfce77a179b9d935a53c342db091aed1d8c2b5ec64676008f752f7b691e4e1d84073
SSDEEP

768:1ncmz/tf3LxTsRUksryV3DdyaOw4NiHpMpi+i3Bs2ZzjhupHBZMI5T0B1s:H3CRUksrezcaOWHu5i3qyWZMI6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c02e8d502ef7e4e52ede02acf703f8_JaffaCakes118

Files

27c02e8d502ef7e4e52ede02acf703f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE