527c1b8fa82df0e77dad18f517e3e670_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

527c1b8fa82df0e77dad18f517e3e670_JaffaCakes118
Size

140KB
MD5

527c1b8fa82df0e77dad18f517e3e670
SHA1

77a6cb7d44b28d204bb3277bef060e2a8db260bf
SHA256

cb997d8470628b37de0749278b68b2cc833c4005fc2bbb394872affe4b7c7986
SHA512

4d8137f22d875223d8f542de30bdbc9314cca65452e3ac5aebad4ad5d3980500aba0ed1b77c2159999fbf40d436c67e3ec24ccb8ef4e5ebcbe768fe812ff8682
SSDEEP

3072:Iz2hj29Smuwg+UTkFAZAz2PEELU2uJztttttttttttttttttttsK2cij+CQ:Iz2Jp0hxYQKK2cij

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
527c1b8fa82df0e77dad18f517e3e670_JaffaCakes118

Files

527c1b8fa82df0e77dad18f517e3e670_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

AccessesIdentifiedAnyAcquire
AnyTheOfServersYou
BePartition
OrOrTheThe
ServerServerBladeEachNot
YourInstances

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ