27f1fbd96b2f3769a2407eedca5ad624_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27f1fbd96b2f3769a2407eedca5ad624_JaffaCakes118
Size

69KB
MD5

27f1fbd96b2f3769a2407eedca5ad624
SHA1

e2ebb02b2e58860f7090ed6f4a8e77cda44fdcc2
SHA256

1366ecca62cc674f9c0a75d9646242e657cab07b3c96175af4fb85082eb1f513
SHA512

b729b7115fdf7478f6fec1acb0dc395bba0604bcb4aab45f89c5b0568a3cadef40a9d0e5a9fc26ae9b63077b2c610c365ff2b402e86e607d2d244f3ad95cb5db
SSDEEP

1536:JZDwqjoA6yjTmBjwJ767b68hkPVLyFZ+8PJ2n6+2y7DyjwiINzhdDhx:JZDwqjoA6yjTm6G7tyt2Z+UK2y7Dy8XL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27f1fbd96b2f3769a2407eedca5ad624_JaffaCakes118

Files

27f1fbd96b2f3769a2407eedca5ad624_JaffaCakes118
.dll windows:4 windows x86 arch:x86

357d3264a246450a648dba8858d447aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CompareStringA
ExitProcess
GetCommandLineA
GetModuleHandleA
GetSystemTimeAsFileTime
GetVersionExA
HeapAlloc
HeapCreate
ReadProcessMemory
lstrcpyA

advapi32

ElfReportEventW
ReportEventA
ClearEventLogA

ole32

CoFileTimeNow
IIDFromString
IsEqualGUID
IsValidIid

setupapi

SetupDiGetDeviceInstallParamsA

olepro32

OleCreatePictureIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleLoadPicture

user32

RegisterHotKey
ValidateRgn
CharNextW

Sections

.text
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ