27cd466a4ce3106c121f124ddbfe9673_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27cd466a4ce3106c121f124ddbfe9673_JaffaCakes118
Size

6KB
MD5

27cd466a4ce3106c121f124ddbfe9673
SHA1

b1a39daf2b8fcfcf56046431194cfc10d558971a
SHA256

3e495d7d198a1d773881a10677158f511c8ceff410b2aafe695ced234107e5c3
SHA512

8215fb2c57c2ec624804287e2c99cefd13bb4f0eca0a6079cbcfcd0cf1d7bf12fced69e9b26fd2cf02dbe004d9a6e51c1ca07100eaafab033977d33dc645fd73
SSDEEP

96:8jlSJX/tMcAqT5q2hxV4f+7fdJWl+BL7AwM5f5:6loX/akTA2hxV4f+7fdnIwK5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27cd466a4ce3106c121f124ddbfe9673_JaffaCakes118

Files

27cd466a4ce3106c121f124ddbfe9673_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2bf10fcb6977cb97a081d462a036b6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ