27f6bccab2ecf71a799b067ecfd0814d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27f6bccab2ecf71a799b067ecfd0814d_JaffaCakes118
Size

8KB
MD5

27f6bccab2ecf71a799b067ecfd0814d
SHA1

514a5a1eb70acf7b146ac7df5670503d1cbc658b
SHA256

676be4ac0949c680a17567bd3a83980ed912a1b0a0fded2f928424ee1ef33d8e
SHA512

e918203fad933229d6756f88c5a20d1ec7d1b7368f09612cd9f072f206300889dcd0a7a701d318078673defd7287a13e39784648cd9f5a2f853c163dcdc7dda6
SSDEEP

96:DDzu0LD7q4yXxa/1MULjpX3M7USwddQbkvl9y407UW6+zX:aqDhyhUMCtX3M7UjQcy407UW6+zX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27f6bccab2ecf71a799b067ecfd0814d_JaffaCakes118

Files

27f6bccab2ecf71a799b067ecfd0814d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2953f221a23ce22b7355e0c8c32cd41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
GlobalAlloc
CloseHandle
ExitProcess
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoA

user32

wsprintfA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE