27bd014cf170574a3ead919db5218c26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27bd014cf170574a3ead919db5218c26_JaffaCakes118
Size

17KB
MD5

27bd014cf170574a3ead919db5218c26
SHA1

d5226ec6dddc71fc9d057f4da388b0bb0b8ab8f6
SHA256

6690aa172fc3d50cec98bd1bc2ef5e330956d76bb269bf59e3c6d6e7cfac3b2b
SHA512

2a075f6d19200e81210ef675aa17a736c6837999d2375537e570755c51ccc5d98edcdda2c130bca4169c970e9f57edf8bcd2a5543e61d13ac23f40fb5557d895
SSDEEP

384:OwoCWut1F880Lts2ELNspp8VlA/zpz3MaMN39BHBDWwBkW:BDWut1F880LtlELNspphz34N39hB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27bd014cf170574a3ead919db5218c26_JaffaCakes118

Files

27bd014cf170574a3ead919db5218c26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18a9bc5eb6edbbfd4580597bcf8b6293

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
ExitProcess

dsound

GetDeviceID

Sections

.text
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ