e27b1b48b787e58d946f762b8b886366_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e27b1b48b787e58d946f762b8b886366_JaffaCakes118
Size

24KB
MD5

e27b1b48b787e58d946f762b8b886366
SHA1

3064660fef57c444f8c353aafc95bdea5dab164c
SHA256

153ef39ff87f338f7737ccf74ca33975428fae1f14c7814cd5229ca028927404
SHA512

637d145fd7ae820e00011e214cdd12c2a6687bd707feee7024fd0fe7a02091a7f805373582e221f4ded0dbe518cbc3fa5de915a3d2588f8756581488de0eb136
SSDEEP

192:GBa1CCpklFPirfLwUyah2H4JkwP1oynOeYKQ9Z1:PCGkUzIahm4qm1a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e27b1b48b787e58d946f762b8b886366_JaffaCakes118

Files

e27b1b48b787e58d946f762b8b886366_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9e57e7e00506ff2f2587666fe74c8bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetProcAddress
LoadLibraryA
CloseHandle
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetModuleFileNameA
CreateProcessA
FreeLibrary
Sleep
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
rand
srand
time
_except_handler3
??3@YAXPAX@Z
??2@YAPAXI@Z
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_access
__CxxFrameHandler
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ