27c408d0688052905a0000fd95df1243_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27c408d0688052905a0000fd95df1243_JaffaCakes118
Size

311KB
MD5

27c408d0688052905a0000fd95df1243
SHA1

1219e5886ef676aab5dff0c230c0f04f0f704719
SHA256

ae84e16ff4bea40a30b270069af23285379970fa2b7d3863ce264e5677eddf78
SHA512

2c2be04120baaedef1f0eaa23a1da7646d299a00fdc87751ef5056a19c54e8fb3a8b30423f219f0362e61b6cd3d89ab78856777e3442c9a93f1ca35de97780ac
SSDEEP

6144:ff1eQpPVMcyWzdiGTjj+5oUBl01oYEcnOkwYKrivI6fyRb:ffnHyWzdTCouqNEBGvIT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c408d0688052905a0000fd95df1243_JaffaCakes118

Files

27c408d0688052905a0000fd95df1243_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE