27d966c92896502a4a2f52b90ead8979_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27d966c92896502a4a2f52b90ead8979_JaffaCakes118
Size

84KB
MD5

27d966c92896502a4a2f52b90ead8979
SHA1

588ecd30ed9cc2859a75188063bd7ddfa026255f
SHA256

ae64ed31a461b9a7326b71d1d18a73fdca994bfea43ffba1b4c70f8d4cd9b54f
SHA512

0a2eacecddc96e8a61a86c76524854e9f5adb997b519c9d5fe4b2285a86400e26acb4df84244f7082e60f6e6a7f64a4c31d2830b255186e448dc3b6a16dc7db0
SSDEEP

1536:ReZWXdSnVHbcU8gkgtEBH1Y1cH6n9tUCigUVPjHRqoYHn:RGnVPttE7kzn9pujHRqBHn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27d966c92896502a4a2f52b90ead8979_JaffaCakes118

Files

27d966c92896502a4a2f52b90ead8979_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4583c5c0d8082e53c211c656a8c14810

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
_except_handler3
strcmp
fclose
malloc
__setusermatherr
_initterm
_adjust_fdiv
free
fopen
sin
_XcptFilter
fprintf
__set_app_type
strlen
_onexit
fwrite
__p__commode
_exit
__getmainargs
exit

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ