27ea4237bc99ce77610241fffa916201_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27ea4237bc99ce77610241fffa916201_JaffaCakes118
Size

114KB
MD5

27ea4237bc99ce77610241fffa916201
SHA1

15936de670fc935fb421b4cd4e429e571ed2bfe7
SHA256

2456b2caf581288156b165b78c01671657bc9a914fe4dfdaf47ffaa99f467ad8
SHA512

be488a52bd77bee55f2b3c49ac102d89dc006cd91bc27b9fa723fe3795b4b7b50e256889172b5ad4d2a18db2a36bb29c6569878546165a9ac4352f8aa023e26b
SSDEEP

3072:ApzRhjOBmNeGs8PDbjA6JzQ75QFt6rlM4:mlO5v8P/ceAAt6r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ea4237bc99ce77610241fffa916201_JaffaCakes118

Files

27ea4237bc99ce77610241fffa916201_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7dcdbbfb90956a7bfd0ea3019b15527a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

SetHandleInformation
HeapFree
TermsrvAppInstallMode
PurgeComm
HeapUnlock
GetFileAttributesExA
HeapSize
HeapLock
GetDriveTypeA
HeapAlloc
GetCPInfo
VirtualAlloc

comctl32

DrawInsert

Exports

Exports

WriteYmmcxkof
Qheikfi
AddDwgmmbwni
Ycjtihvphmu
Ubxikahsc
Frriscg
EndRuihgjb
CreateEyjniakvkvc
Rchpqfihwfr
CreateFffyrglf

Sections

.itext
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ