27031f28bd243a4fa459fde8e489fe30_JaffaCakes118

General

Target

27031f28bd243a4fa459fde8e489fe30_JaffaCakes118
Size

168KB
MD5

27031f28bd243a4fa459fde8e489fe30
SHA1

2f0a9efb8aaa4bfd49add18634813d2c6af77963
SHA256

c759ce8257f5369f170632f883461befeac424e075f257cb7bfd04af416c84c1
SHA512

6bdbfcd5e155ca1acda6f4a7389927f0a10b35f2559abe4b0e78c07b4b4f60788224233f25b427a26beda1969aa1e81d2d2de7e431640c87486f4516e034df21
SSDEEP

3072:xIoiMI0pebGOgSA1gfSuJDZMCCigYLLTj4CzZj4Uiu2MyMklL5MpVuLyS2uZG:qTMI0EXcgtZQMr40jBiQklUQLX2uZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27031f28bd243a4fa459fde8e489fe30_JaffaCakes118

Files

27031f28bd243a4fa459fde8e489fe30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c2029526fb2c90c3ad30492352cd634

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

gdi32

DeleteObject
GetTextMetricsA
GetTextExtentPointA
SelectObject
GetDeviceCaps
CreateFontIndirectA

ole32

CoGetTreatAsClass
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc

msimg32

AlphaBlend
TransparentBlt

kernel32

UnhandledExceptionFilter
FreeEnvironmentStringsW
HeapSize
WideCharToMultiByte
GetOEMCP
GetCPInfoExW
lstrlenW
SetHandleCount
GetCPInfo
GetThreadLocale
InterlockedIncrement
FreeEnvironmentStringsA
RaiseException
GetStartupInfoA
EnumResourceTypesA
TlsSetValue
WriteFile
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
GetEnvironmentStrings
MultiByteToWideChar
EnterCriticalSection
GetVersionExA
GetLogicalDriveStringsA
GetEnvironmentStringsW
InterlockedExchange
GetLastError
TlsGetValue
GetStdHandle
QueryPerformanceCounter
GetLocaleInfoA
LeaveCriticalSection
GetACP
GetFileType
GetCurrentProcessId

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c2029526fb2c90c3ad30492352cd634

Headers

File Characteristics

Imports

shell32

newdev

gdi32

ole32

msimg32

kernel32

Sections

.text Size: 101KB - Virtual size: 101KB

.tls Size: 2KB - Virtual size: 1KB

.data Size: 63KB - Virtual size: 62KB

.reloc Size: 1024B - Virtual size: 104KB

.text
Size: 101KB - Virtual size: 101KB

.tls
Size: 2KB - Virtual size: 1KB

.data
Size: 63KB - Virtual size: 62KB

.reloc
Size: 1024B - Virtual size: 104KB