27ee2aff884d0072c8f46a35dd56353b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27ee2aff884d0072c8f46a35dd56353b_JaffaCakes118
Size

320KB
MD5

27ee2aff884d0072c8f46a35dd56353b
SHA1

bad6e4a673deb993fe73ad150e73ebbb9c71dbfb
SHA256

1da42136d2c094fb05643a7bba36a73942c61a2623139427283c4842ead7201a
SHA512

8663cc06542f2babcda6c5bb99c57440a14c58e95b22a25cb8d985a071be1e8cd3f67107562de9c8a1ace3c2c8caa5dc926b6b9f5ff9dd29e70d02dcf69305fc
SSDEEP

6144:VjJZakEaUq1NjrLcEVQFzylHd+SYCkl7M+W5x3lL5fyqmdFBH++2:XZakES1WEikHt9kNK5x3lFvOR++2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ee2aff884d0072c8f46a35dd56353b_JaffaCakes118

Files

27ee2aff884d0072c8f46a35dd56353b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6dd099f94038702fea19812bbce41f87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA
LockResource
VirtualFree
LoadLibraryExW
FreeLibrary
CreateFileA
GetTempFileNameA
GetTempPathA
WriteFile
CloseHandle
GetTickCount
LoadResource
SizeofResource
FindResourceA
ExitProcess
MoveFileExW
MoveFileA
GetCommandLineW

user32

DefWindowProcA
BeginPaint
EndPaint
PostMessageA
PostQuitMessage
SetTimer
RegisterClassExA
LoadStringA
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
UpdateWindow

shell32

CommandLineToArgvW
SHGetFolderPathA

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ