b27a78d2426eb546a4028a8b1e9680bf_JaffaCakes118 | Triage

Sharing

General

Target

b27a78d2426eb546a4028a8b1e9680bf_JaffaCakes118
Size

157KB
MD5

b27a78d2426eb546a4028a8b1e9680bf
SHA1

2a4db4bda482a1e59b189d0d17dbcdda67815db7
SHA256

9c90145d8b0a48b3e9e80d7fb95eb9ab762c61375e869c5f1be488383677d0f0
SHA512

4ee87f4bf0e330cf8470eda6335ee2902cd07d6d8b4660821abe4b1e718b49a679136b2776bc8042076fe8433d91e789ee878f3cc482ce436e196499e6910308
SSDEEP

3072:Q99jHL/F9BRqKY5nPd0LBuZXwBuTuu5OuTbmKsAkfGRMvBCcNt0000j0000NWYq:wjHL/F9B0KY5nV0LBuZXwAasOmwvBF0F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b27a78d2426eb546a4028a8b1e9680bf_JaffaCakes118

Files

b27a78d2426eb546a4028a8b1e9680bf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5459e2473b6a18eb337c446d758f3cdf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_controlfp
malloc
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_except_handler3
_exit
free
_XcptFilter
exit
_cexit
_c_exit

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

kernel32

lstrcpyW
FormatMessageW
LocalFree
GetModuleHandleA

user32

SetForegroundWindow
MessageBoxW

shell32

ShellExecuteW

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SysAllocString
VariantInit

wininet

InternetGetConnectedState

rasapi32

RasEnumEntriesW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE