27a41191a1d149f223b5715fbbca51dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27a41191a1d149f223b5715fbbca51dd_JaffaCakes118
Size

6KB
MD5

27a41191a1d149f223b5715fbbca51dd
SHA1

f927f1db3c6b706740ed9d353319a20786c95263
SHA256

ac2d19bdc9106b754eb1ee95b2a8f2e044619c988c029697f4aa95f2f09bcbf1
SHA512

54db9a7bf9d31231827c6a6396774102334d4d4a64675d3fed969c71cebb12a8b9b3918b7043dec8b86accaf868da98544c368154f91ca38dd956c5cf38f6639
SSDEEP

96:2nJkMGipslGH9WDw1A6NjLcdo8E/ApMd2vVG9rvVGnPVNPtboyN/I:2niMGQ/H9RZcS8EY0QCOPVNP1oyN/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27a41191a1d149f223b5715fbbca51dd_JaffaCakes118

Files

27a41191a1d149f223b5715fbbca51dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e93cfc1873fb236543227a1bebadddfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
Process32Next
CreateToolhelp32Snapshot
GetProcAddress
GetModuleHandleA
CloseHandle
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
LockResource
GetModuleFileNameA
GetStartupInfoA

advapi32

GetUserNameA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ