27dc8c792ff0b5f837595c465a4b30b2_JaffaCakes118 | Triage

Sharing

General

Target

27dc8c792ff0b5f837595c465a4b30b2_JaffaCakes118
Size

96KB
MD5

27dc8c792ff0b5f837595c465a4b30b2
SHA1

fe0634466b27ca90069ef4d7052b4bc11c45aaf2
SHA256

7900418a9f461018bb7d1ea212bbb2b4e2020644d3ae718258ca25c2174515df
SHA512

30f4d8dc33b1ba7bd3f6bf3cb99fd134837522d1bc9ea5b860ac4607a04192d901dd3850d101c81eaf5f0edc38a07f1ad99b1269a3141119b02e44af300b5df6
SSDEEP

1536:ZQY0xY0ozYCDjfDjnh/oI+8L4Hk0Fer+BV/GRRD3tZg0QOYHukdHupMDba:p0xY0ozYejx/o+4EGbu3Tg0FYHukdHX6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27dc8c792ff0b5f837595c465a4b30b2_JaffaCakes118

Files

27dc8c792ff0b5f837595c465a4b30b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9374e6c2853e94828ae87fb7e0889943

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetPriorityClass
UTUnRegister
GetHandleInformation
WaitForMultipleObjectsEx
SystemTimeToTzSpecificLocalTime
SetStdHandle
FindFirstVolumeMountPointA
CreateNamedPipeA
FindClose
ScrollConsoleScreenBufferA
GetCommState
GlobalAlloc
SetErrorMode
SetConsoleCursorMode
GetEnvironmentStrings
GetStartupInfoA
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ