27ff42b60daaf5b9593316c39cd38227_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27ff42b60daaf5b9593316c39cd38227_JaffaCakes118
Size

111KB
MD5

27ff42b60daaf5b9593316c39cd38227
SHA1

4279a92f1bc233e078fa3e556f0026ce46071c70
SHA256

d2559e3b253029868f8d359b7d5072dca00636deeff8169595c3c575ad94d503
SHA512

8bb89c0d4e2ec2d0456994afee038b7d4bb27f1a7223a437ca78df5a69e0cd78b10f9b5062f71bf150af2a4b80bcb736c2fdfaf15ed96020d2bd722e8911981b
SSDEEP

1536:KEP+rKy00VgavKDkRTXjBTVNMprSDvN+Pk/M4:K6Q201SwRT9VySJKsM4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ff42b60daaf5b9593316c39cd38227_JaffaCakes118

Files

27ff42b60daaf5b9593316c39cd38227_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d75fcdcc529f30c940569df637c2f7dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow
BeginPaint
CopyImage
GetMenu
GetMenu
IsWindow
GetScrollInfo
DrawIcon

kernel32

HeapFree
ExitProcess
GetLastError
ReadFile
DeleteFileW
GetFileTime
GetLocalTime
DeleteFileA
GetStdHandle
DeleteFileW

advapi32

RegQueryValueExA
RegOpenKeyW
RegQueryValueExW
RegDeleteValueA
RegCreateKeyW
RegGetKeySecurity

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 343KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ