27bd92c39ac8165c3fa5c586168eb24a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27bd92c39ac8165c3fa5c586168eb24a_JaffaCakes118
Size

17KB
MD5

27bd92c39ac8165c3fa5c586168eb24a
SHA1

360c63ba7fc37a6607bb533aec1f4f241a1a49b4
SHA256

17400c76e7a6058dc6eaf0935444cdc08b828256fe4c35403f9dbdc598ef4526
SHA512

4853a7f81baf6a92d6393ba1f6e75832f5fee18777f6c27a9fa5397e38361d2b19099e51a06a5f94006691706f639321d696da26b5c127aff2d155a6f759df9d
SSDEEP

192:y2Lr1HxS+Ez0UakJppdtR2PM2IThC62CDD:yaUVJj7R2PMxU61n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27bd92c39ac8165c3fa5c586168eb24a_JaffaCakes118

Files

27bd92c39ac8165c3fa5c586168eb24a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4bd4a1b421b3693a364ff5e4c4d4137d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
FreeLibrary
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
LoadLibraryA
SetUnhandledExceptionFilter
WinExec

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE