27cef61089d8f3132bb08cec3aefb339_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27cef61089d8f3132bb08cec3aefb339_JaffaCakes118
Size

392KB
MD5

27cef61089d8f3132bb08cec3aefb339
SHA1

2d23eb8563981c52a2aa7415366f33a3986f8b3c
SHA256

d46b1786f04a3eba4dee11c224b0d5abe83d0fb842fd5a38c397c80e6d435459
SHA512

e145986ebe1e8f363ec0c205b3c2abb5dea139074186eb21309d577fc5db7c95aba5dc961999e3bfce015774c1e8d3fa6f2ce4277c204c92a9eae5a5cfed4e9d
SSDEEP

12288:uDGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwdb:uDGGEdwORVb4iiX2tzGyG2oq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27cef61089d8f3132bb08cec3aefb339_JaffaCakes118

Files

27cef61089d8f3132bb08cec3aefb339_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15e88474e3fa5232845b56e929ea6e57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
FindAtomA
GetLastError
WaitForSingleObjectEx
GetACP
CloseHandle
LocalLock
GetConsoleAliasA
LocalFree
FreeEnvironmentStringsA
GlobalUnlock
CreateFileA
Sleep
FindClose
GetCalendarInfoA
HeapCreate
TlsGetValue
CreateFileMappingA
GetModuleHandleA
LoadLibraryExA

user32

GetMessageA
SetFocus
CascadeWindows
DrawTextA
IsWindow
CreateDialogParamA
DispatchMessageA
GetIconInfo
CallWindowProcA
DefWindowProcA
GetDlgItem
DrawEdge
GetDC
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncFlush

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ