27a5c2ecb456de9f9364a0afada11bd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27a5c2ecb456de9f9364a0afada11bd6_JaffaCakes118
Size

494KB
MD5

27a5c2ecb456de9f9364a0afada11bd6
SHA1

7fe2efd1670adc618faf394b4f57c447bfc65beb
SHA256

a293bdc2dc45dbeeeaeac634b07e599a3f8bc0e007576b4ee58096b3367d1846
SHA512

ed610b8f9c30a33418a99a636a7aa78926d21435a252f9d72efe1fa616d12bbaf25da93990f207fb1a0ae59fcaefab2257ce2ccd25a35ca35a05ee2c7a4949c1
SSDEEP

12288:OYFy+7LFH4EoPggVJwHvjq8NHfWjME0FnRZqqmf0T6Z:OYHKTzavXoMEsRZ3mfV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27a5c2ecb456de9f9364a0afada11bd6_JaffaCakes118

Files

27a5c2ecb456de9f9364a0afada11bd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e88cbe3227ad520c28ab43ebe57e6db4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

advapi32

StartServiceA

ole32

CoInitialize

oleaut32

VarUI4FromStr

setupapi

SetupIterateCabinetA

comctl32

InitCommonControlsEx

Sections

.text
Size: 378KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE