27c6f3283f56f7bb0cecafc209dbb27f_JaffaCakes118 | Triage

Sharing

General

Target

27c6f3283f56f7bb0cecafc209dbb27f_JaffaCakes118
Size

20KB
MD5

27c6f3283f56f7bb0cecafc209dbb27f
SHA1

6d3b8bce2d938ebeb5d534c6d6510d05613da607
SHA256

f7c517c6632c6aa39dd57fb9574b5c9cc97d91b94eb50115b0b87f9d9602bd04
SHA512

1bae3468e83bff5f9b53d671b171d2951269113d33cd7d256209062aa75b4871909a7fcb4db1370e566817a3355caf3e3bd6d4d12f73f7ddd17662cf967f025f
SSDEEP

192:jnuybEF4VL6WscSZ6VFGG4N66i3wyGc4U5qyw:ju5OR6USAGG4ovaH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c6f3283f56f7bb0cecafc209dbb27f_JaffaCakes118

Files

27c6f3283f56f7bb0cecafc209dbb27f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA

Exports

Exports

CBTProc
OPThread
SGThread

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ