27fdca6dc36fa44505339f0bc204d2d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27fdca6dc36fa44505339f0bc204d2d2_JaffaCakes118
Size

192KB
MD5

27fdca6dc36fa44505339f0bc204d2d2
SHA1

ef48287a5e8bbf50314ea5691ed37bcaec257fea
SHA256

c1551be86b7d3bb7b2c23a6d48a461ed9ca88ce3add8268edc49af6cf7f4862e
SHA512

8dcf512496f0a914569e983cb9df3601b68a3b8414142223277cd2432f7201f8f5548b2adf6abb4c2648988b0a3b82d20300776ca3eca3d0775692bc0ac09ac0
SSDEEP

3072:UabWdfg9SyQDNyPRn8M3dboBhNLs8ejJolV9vS7TBzYrBBzY:UGWdwAdM3doBhNbeJEbE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27fdca6dc36fa44505339f0bc204d2d2_JaffaCakes118

Files

27fdca6dc36fa44505339f0bc204d2d2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b29d9179ca8a45f909f9b498a358705a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

GetKeyboardType

msimg32

AlphaBlend

gdi32

SetTextColor

version

VerQueryValueW

wininet

InternetReadFile

comdlg32

GetSaveFileNameW

crypt32

CryptBinaryToStringW

ntdll

NtShutdownSystem

shell32

SHGetSpecialFolderPathW

ole32

CoCreateInstance

comctl32

InitCommonControls

Sections

.text
Size: 174KB - Virtual size: 860KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ