27cdfcc67303d2bcaab671a0354c97ca_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

27cdfcc67303d2bcaab671a0354c97ca_JaffaCakes118
Size

232KB
MD5

27cdfcc67303d2bcaab671a0354c97ca
SHA1

81340039f2516d1b6e06e2413d76d59fbba3cb88
SHA256

1b684327e5b9fab6d0cd00f391f72b279272f74e47858cdf27bc3937800d9471
SHA512

27371bd315d9930faf532e62362a398238d9ecaff5f1a8aa01175f3e23c90fb76086c5da81b06572196c61bf712d3a208f7849e6421ecbeb79a14fd64832bca8
SSDEEP

6144:v4wtpzWUyuvgUinzivnMHUXGDK53/lZ/oE+jPcM:IUXinzivnMHUXqwPDAzDcM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27cdfcc67303d2bcaab671a0354c97ca_JaffaCakes118

Files

27cdfcc67303d2bcaab671a0354c97ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1905c1d8c49ee40b575130f3dd013f74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetFileTime
GetFileTime
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
SetConsoleCtrlHandler
FlushConsoleInputBuffer
SetConsoleMode
GetStdHandle
GetConsoleScreenBufferInfo
GetSystemDefaultLangID
CreateDirectoryA
MultiByteToWideChar
SetConsoleTitleA
SetPriorityClass
GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
ExitProcess
EnterCriticalSection
LeaveCriticalSection
ReadConsoleInputA
GetConsoleMode
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetLastError
GetFileType
SetEndOfFile
HeapFree
HeapAlloc
GetProcessHeap
DeleteFileA
FindClose
FindFirstFileA
FindNextFileA
GetTimeZoneInformation
GetSystemTimeAsFileTime
HeapReAlloc
GetCommandLineA
GetVersionExA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
DeleteCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSection
SetHandleCount
GetStartupInfoA
Sleep
ReadFile
WideCharToMultiByte
GetConsoleCP
SetStdHandle
SetFilePointer
FlushFileBuffers
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetFullPathNameA
GetFileAttributesA
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapSize
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
RaiseException
GetDriveTypeA
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentDirectoryA

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1905c1d8c49ee40b575130f3dd013f74

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 148KB - Virtual size: 144KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 176B

.text
Size: 148KB - Virtual size: 144KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 176B