27db2a31f9c8d7159ad2f8da7d9f36f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27db2a31f9c8d7159ad2f8da7d9f36f8_JaffaCakes118
Size

184KB
MD5

27db2a31f9c8d7159ad2f8da7d9f36f8
SHA1

31e457acba9e7b60e5648d7c6da73e98ccc9cddd
SHA256

8a035b6431dda9cd9acd9bf821158717854d746a56fee2e84304c3f15445d0e3
SHA512

a5f39b4f946efbca2ea903512cca6ebe91e683d0210e280d02699b308bda2875b81c9e1efab8e2dacfef16c3719b24f0c867e695f94a56cfb49f2a1903f6ce57
SSDEEP

3072:LbQrwWH62GoFmRRkTLOM1kN+0782QHEp3DIyWuCWxxl8jS7//V/aufGmM7:LAwoVAeLOMXCh/3cWT2jS7/t/JfGJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27db2a31f9c8d7159ad2f8da7d9f36f8_JaffaCakes118

Files

27db2a31f9c8d7159ad2f8da7d9f36f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40d9bc595e3ca023dd9b94259b941700

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
CloseHandle
GetCurrentProcess
LoadLibraryA
CreateFileA

user32

CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA

advapi32

RegDeleteValueA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegEnumValueA
RegEnumKeyA

Sections

.text
Size: 162KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ