27cac8cbadad22512e59cd872a216940_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27cac8cbadad22512e59cd872a216940_JaffaCakes118
Size

393KB
MD5

27cac8cbadad22512e59cd872a216940
SHA1

4256342b10cd3b09d2c4350002f3a87439a5228f
SHA256

e14ec6181bedf06a2886a2dd6fcba0a86dd0562bd7a66995f963f7800ec8878f
SHA512

21115ce8a14da33aaf3d4d41b9758a82277dddcd6e11857f63f94ec7ad41c1bac6d62f3d8393bcc29c77104cd23ce34cfaadb5b22f06ba8bdeac0ca31e1099f7
SSDEEP

12288:gX3KpJI6xj1dV9fJcEXW4OYIb5IiENCaCCN:gXCb1dV9fJhXWGHNrN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27cac8cbadad22512e59cd872a216940_JaffaCakes118

Files

27cac8cbadad22512e59cd872a216940_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc2c9377e82c3d4bf3059174b2c9e5ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
CloseHandle
CreateFileA
TlsGetValue
FindAtomA
GetLastError
GetModuleHandleA
GetConsoleAliasA
GetACP
Sleep
HeapCreate
GlobalUnlock
FindClose
WaitForMultipleObjects
GetCalendarInfoA
FreeEnvironmentStringsA
GetConsoleCP
LocalLock
CreateFileMappingA
LocalFree

user32

GetDC
DispatchMessageA
CreateDialogParamA
IsWindow
CallWindowProcA
SetFocus
GetDlgItem
DrawEdge
GetMessageA
GetIconInfo
CascadeWindows
DrawTextA
DefWindowProcA
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecNull
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BERDecSkip

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ