27d3df8f281cf83c1302a15c0a2cb666_JaffaCakes118 | Triage

Sharing

General

Target

27d3df8f281cf83c1302a15c0a2cb666_JaffaCakes118
Size

276KB
MD5

27d3df8f281cf83c1302a15c0a2cb666
SHA1

7b6173952fce0ceef468d03d89837aa44db50b18
SHA256

6e3afae6dfa0852909a638ca3b67a58cf255558031c560294349120122420b12
SHA512

99e412efc1d504aad988f6d4775980b616dbb6452144215465114348fbfc05e9b415f410a374a17b45123b2a216708ddc4ca7a95a2e6b25abfad531ad66be595
SSDEEP

3072:6lN47uX+9/Q/p3hGDklh6PGNGs1LGKXWlquB+LTWvpIlrsopoWfEAD:6I8UWC1Ho7mlquEmpWrFfE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27d3df8f281cf83c1302a15c0a2cb666_JaffaCakes118

Files

27d3df8f281cf83c1302a15c0a2cb666_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

Micam_Drawasks
ati1j_wesil
inetsoft_Kicord

Sections

.text
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ