27a850ac1a82cbc0900aa9634ace95e1_JaffaCakes118 | Triage

Sharing

General

Target

27a850ac1a82cbc0900aa9634ace95e1_JaffaCakes118
Size

352KB
MD5

27a850ac1a82cbc0900aa9634ace95e1
SHA1

c5b6b0fd18e0e4cc2c44b383ccf915d3554fb780
SHA256

e9b716d5107ea6e477d52f87adef3d962394423f90a1790ec6abb22f90c30969
SHA512

1ed516da4b8e685beed7fac7783990582ed49466636a6f02dca591bd34c1637390d5b64c51a611f6a5ef5d8332ece360a04dbfd0c97e142c9d2864b7d5757ffd
SSDEEP

6144:utmpyV+uX6w+VRgbw6imfBtS7MUgF6vtA7ync3ZNm0+pntTsP/XzS+NACo:3pyUuJbB5tNFX7B3JusP/j7aCo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27a850ac1a82cbc0900aa9634ace95e1_JaffaCakes118

Files

27a850ac1a82cbc0900aa9634ace95e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e5c5ddd3ec5cc2fe94be5f24f86b0b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FreeEnvironmentStringsA
lstrlenA
GlobalUnlock
GetLastError
GetACP
CreateEventA
OpenMutexA
LoadLibraryExA
IsBadReadPtr
CloseHandle
GlobalLock
GetStdHandle
GetSystemTime
FreeConsole
GetModuleHandleA
ResumeThread
LocalFree
IsBadStringPtrA
VirtualProtectEx

user32

GetDlgItemTextA
CreateWindowExA
ClipCursor
GetSubMenu
GetMessageA
DialogBoxParamA
GetComboBoxInfo
CheckMenuItem
IsMenu
GetMessageA
EndDialog
SetFocus
IsIconic
MessageBoxA

msasn1

ASN1BERDecBool
ASN1BEREncNull
ASN1DecAlloc
ASN1BERDecCheck
ASN1BEREncOpenType

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ