27bfc86d63b86387120cb46731111b04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27bfc86d63b86387120cb46731111b04_JaffaCakes118
Size

814KB
MD5

27bfc86d63b86387120cb46731111b04
SHA1

32aadf690297bf7686ec4c568e0beefcebab3f49
SHA256

ba4632b5a796ab6cc185c00e20df4d5481484dd997e3dbf88c45d1f6e309f932
SHA512

15f74556ef677e8496a3164149e31b8a987e7cd1aa1965961eba72d7c6033833709611d201d8108e910867b4f9583561dd5de68d6e9eac6ada431e0f81c25c1c
SSDEEP

24576:WbVJV9t8awgq8fChCciV5MLdQ260vHibl:WbV39Wbg7kC9ViJQ2Tql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27bfc86d63b86387120cb46731111b04_JaffaCakes118

Files

27bfc86d63b86387120cb46731111b04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11fb262982ddfb6b93edd6de8b2dd064

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
CreateFileMappingA
FreeEnvironmentStringsA
GetModuleHandleA
CreateFileA
LoadLibraryExA
GetConsoleAliasA
LocalLock
GetLastError
GetACP
WaitForSingleObjectEx
Sleep
FindClose
GlobalUnlock
CloseHandle
TlsGetValue
GetConsoleCP
LocalFree
HeapCreate
GetCalendarInfoA

user32

CallWindowProcA
GetDC
GetDlgItem
DefWindowProcA
SetFocus
DrawEdge
DrawTextA
GetMessageA
CascadeWindows
GetIconInfo
CreateDialogParamA
IsWindow
DispatchMessageA
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BERDecNull

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ