27f6328530facf0957e5ba48188c47ab_JaffaCakes118 | Triage

Sharing

General

Target

27f6328530facf0957e5ba48188c47ab_JaffaCakes118
Size

107KB
MD5

27f6328530facf0957e5ba48188c47ab
SHA1

836b3f63dec9a27f69f4fbc786dc3c07e485a386
SHA256

0ad9f8df4716b1e5598f7e985e2654d5c3d97da9a051f9e55d54150b2af25a0f
SHA512

c4c4ad73ef02ebf067d09b26ccbe07d2c5f41142b167de699511a9054765a89724f89af2a4bd186d933c1396b27b61804844c01c00659ad9a422cd58224e5780
SSDEEP

1536:RiCiC4vgiv5O+zmeGDjwVcY2YaufP+hJJa9l/Vx/Fqnu0eWeLHz5gvM8X/:9i5JxON5Djs2YaufP+hJMfVx/Fh0v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27f6328530facf0957e5ba48188c47ab_JaffaCakes118

Files

27f6328530facf0957e5ba48188c47ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7672ecefbafcb94d7f731bcd87f93bbd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCurrentThreadId
VirtualFree
Sleep
ExitProcess

user32

CharNextA
GetDesktopWindow

Sections

.text
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Crubc Yi
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Hvcdto F
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Bthxr, I
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 263B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ