27eff476bb98122a39fa229bab8a7d8a_JaffaCakes118 | Triage

Sharing

General

Target

27eff476bb98122a39fa229bab8a7d8a_JaffaCakes118
Size

231KB
MD5

27eff476bb98122a39fa229bab8a7d8a
SHA1

2976b5e3f4475109afa4b1f76f34ecde5da929b0
SHA256

bf026a1b15064637f08cd4685ede29d89c3b33c4563efb2a052e10a760b84f22
SHA512

dee93f58089ad4482a0da13730533212fa5219ca4f3948bb18b7962121a3ef5d2cdc58db29c5282f5472881d9fc1895ec953aa96a93cb11174a542e0ca0933e3
SSDEEP

6144:Irpb3lGnO4DABXWWGR4bmzSbdehq2jwb5SwI5J:Irpb8nXkVRGR4bmupiq2k5e5J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27eff476bb98122a39fa229bab8a7d8a_JaffaCakes118

Files

27eff476bb98122a39fa229bab8a7d8a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

90218010fbad8051919200339a757253

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndDialog
EndMenu
IsCharUpperA
LoadCursorA
LoadImageA
MessageBoxA
DrawMenuBar
OemToCharA
OemToCharBuffA
RegisterClassA
SetCursor
ShowCursor
DestroyCaret
CreateMDIWindowA
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamA
CreateDialogIndirectParamA
CloseWindow
CharUpperBuffA
ActivateKeyboardLayout
MessageBoxIndirectA
wsprintfA

kernel32

SleepEx
FreeResource
RtlUnwind
VirtualFree
CloseHandle
SetCurrentDirectoryA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 107KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 121KB - Virtual size: 539KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ