27c3bcc3cb5f7d28c2ca91d4fab01daa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27c3bcc3cb5f7d28c2ca91d4fab01daa_JaffaCakes118
Size

775KB
MD5

27c3bcc3cb5f7d28c2ca91d4fab01daa
SHA1

0bd7031605482f3be0629f37f0b92dfa8e68e973
SHA256

63ce893773496543ab5c130b3646203e53ccb91377682cd05ddd3574441d6993
SHA512

830ad91b5718a78402f8b7ccee21e857dd6c1c4a9ca7f46b6d4ea3e0dbc0ea33e4e45bdca0a0160674a114de7b913bf4d0aad173974e01c1c4c32a0125e6902e
SSDEEP

24576:eKw1VHqTyH8tMR8yzUFF+8q9kDeukZnfD2IJ:B6tHQxFnq6yLZnyi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c3bcc3cb5f7d28c2ca91d4fab01daa_JaffaCakes118

Files

27c3bcc3cb5f7d28c2ca91d4fab01daa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfd8341e1cb505fef86528a5d6e52d91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
lstrlenW
CloseHandle
GetExitCodeProcess
CreateMutexA
LoadLibraryExA
GetProcessHeap
FindResourceA
ReleaseMutex
SetLastError
TlsGetValue
TlsAlloc
GetStdHandle
CreateFileA
GlobalUnlock
GetCurrentThreadId
GetModuleHandleA
HeapCreate
GetEnvironmentVariableA
DeleteAtom

user32

FillRect
GetDC
DrawEdge
CallWindowProcA
GetDlgItem
CreateWindowExA
DispatchMessageA
IsWindow
CreateMenu
GetCaretPos
DrawMenuBar
CheckRadioButton
SetFocus

ntshrui

IsPathSharedA
GetNetResourceFromLocalPathA
SetFolderPermissionsForSharing
GetLocalPathFromNetResourceA
IsPathSharedW

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE