27fab40370fbfb6f9bbd201911d3d523_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27fab40370fbfb6f9bbd201911d3d523_JaffaCakes118
Size

99KB
MD5

27fab40370fbfb6f9bbd201911d3d523
SHA1

2e73d516727316693236d4b1b8b2e7eb45eb375f
SHA256

fada7aad5addef9099b63d06439a28c60a8e59035e35ad344e2d90fc4a028944
SHA512

5e224803c983b0ab8d4526950b3c22747807bee06cefcddd41eca7f61eae9dfade21ea868bc809fbc9c1223b392f7a192a11200371693329252e9db5f306f86f
SSDEEP

1536:r5J2uOu21MrSEEKeYP/8cx1LjIel7aQ+yFgnVoEKr9Gj9keLlCnu:ruugPueYzjKPyIOOeYonu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27fab40370fbfb6f9bbd201911d3d523_JaffaCakes118

Files

27fab40370fbfb6f9bbd201911d3d523_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de6fdcdc7f4ad649a7529bf91b3c3b02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ws2_32

WSCInstallProvider

Sections

CODE
Size: 94KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE