27ac066a241ab21240c3612f8cab5e56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27ac066a241ab21240c3612f8cab5e56_JaffaCakes118
Size

92KB
MD5

27ac066a241ab21240c3612f8cab5e56
SHA1

d45ad957bb3eefdc04211138c020ad448b37e8d3
SHA256

eef2727b169e777e777ab7213d8a70655ac61aa5c633c888645b8a58baa8c21a
SHA512

6447cb3bb0b1ff2b4f36bf14a815af0a721d7e9b1f26d77b92c9701e548f7da374ffd440fd3055d153774be07b5339b5eb8b44e081db2625b2f47d47fc19f51b
SSDEEP

1536:lpwgDQqDIyiPIqFv6gAcVGRmFG8YUkVplGcJscN2Qfa7sULVaPe8cONF3+spW:lpNDQozidVGg94Jsq2qa7sUpQe8cONFI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ac066a241ab21240c3612f8cab5e56_JaffaCakes118

Files

27ac066a241ab21240c3612f8cab5e56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45857c78f3fed774ab508c015b1010c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
CreateFileA
LoadResource
GetTempPathA
GetCurrentThreadId
FreeLibrary
OutputDebugStringA
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
GetTickCount

user32

GetMessageA
PostThreadMessageA
GetInputState
wsprintfA

shlwapi

PathFileExistsA

msvcrt

_XcptFilter
_controlfp
__set_app_type
__p__fmode
_except_handler3
sprintf
memset
strcat
strcpy
_exit
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ