0e27ec78ca79088dd85e9c4da457baf6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e27ec78ca79088dd85e9c4da457baf6_JaffaCakes118
Size

56KB
MD5

0e27ec78ca79088dd85e9c4da457baf6
SHA1

9b178b7825b53eeacde87a1d1c733aa0659b0e68
SHA256

9d9891c3803d80b3720fdbae44ec2c4f4e9056602b4adebcd6bdd1905c7f9513
SHA512

955b360775e96aa60cfc2534fce0ee0d496fcc11fb1a5b3427f3ca628fca922431e48e5857d07c37f816604e6972231d3250ec6c9ed1c33ec907c875c29c62b8
SSDEEP

1536:y51XbeMRUGvXw5+Mt62JUAOSlIZAQwh5MO:y51XbPvXU+S6yU10Qwh3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e27ec78ca79088dd85e9c4da457baf6_JaffaCakes118

Files

0e27ec78ca79088dd85e9c4da457baf6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3312cb1f08f1e1f7b94fb751b377ae61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetExitCodeProcess
IsValidCodePage
GetLastError
GetModuleHandleW
GetDriveTypeA
HeapFree
GetConsoleTitleA
lstrcmpiA
GetStringTypeW
GetModuleHandleA
DeleteFileW
GetTickCount
DeleteFileW
GetVersion
DeleteFileW
HeapCreate
GetShortPathNameW
GetStdHandle
SetFilePointer
GetStringTypeW
HeapAlloc
SetEnvironmentVariableA

mstscax

DllUnregisterServer
DllGetTscCtlVer
DllCanUnloadNow
DllRegisterServer

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rs
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ