27f7ba9fd01c9707efef0ff94048d439_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27f7ba9fd01c9707efef0ff94048d439_JaffaCakes118
Size

135KB
MD5

27f7ba9fd01c9707efef0ff94048d439
SHA1

d01c27e9232775ffc989944861fc0bdab513c0dd
SHA256

2e85c3ff5cef547b3c1f4d6ea31d3ef00c00632a1643c0af4db715123f277cfe
SHA512

758af043cd902dd9727f75c5b18cecac227c5289020da10969a193184ce6c95e0c75d67e678168a6bbd3ec8789178a9eba24cb634fede7d075e3c424a349c18a
SSDEEP

1536:QIk2yDIpXElNB4fv4EnpkLp9A4os31cQ3NankFeyzTFmHgeIjS2nK4fouXX:OVDVlL43VnpQbpNGQ3dFtzTFmH1c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27f7ba9fd01c9707efef0ff94048d439_JaffaCakes118

Files

27f7ba9fd01c9707efef0ff94048d439_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5a338159e60baee583bc50c193d07a1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW

user32

LoadBitmapA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA1
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ