27630d3c80fe7f5ae6cdd3143eb8af65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27630d3c80fe7f5ae6cdd3143eb8af65_JaffaCakes118
Size

34KB
MD5

27630d3c80fe7f5ae6cdd3143eb8af65
SHA1

eabd5dc02abcbcb7b9a0c5c023f90d1c657b3fb4
SHA256

93f1e8cfaf4a0501a32634b676f95c942bec319cfe75c4bcec373bbc9c54ee5f
SHA512

367e9d00f96a278f219f058f48df0738ebd3fd24f4e1b8428881a31eb92764c3e590c8bfa22685aede5303d87fef408d2d3d8544f0c83c2bd34cf43bbe60cffb
SSDEEP

768:dcf7fNkXyJBrNBi8fHkfrPmnqjzJI0Cv2z+qPllXR5z:mfR9HASqfK0u26YrX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27630d3c80fe7f5ae6cdd3143eb8af65_JaffaCakes118

Files

27630d3c80fe7f5ae6cdd3143eb8af65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af7fdb9ebf2cb69a553a3b994499fc16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

DragQueryFileAorW
StrStrIA
DuplicateIcon

Sections

.text
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE