27768eec27c9c3a667f5173db7810c74_JaffaCakes118 | Triage

Sharing

General

Target

27768eec27c9c3a667f5173db7810c74_JaffaCakes118
Size

340KB
MD5

27768eec27c9c3a667f5173db7810c74
SHA1

547e05da69d607a934c530ebcda9736f6901bdde
SHA256

dff26e290812c9fb2d7e242dfb47a5a81f4752d336fc46c9b54e280aacb14945
SHA512

8c6ce776267376b3f34ec62377d516fc5ba9cdf3f8d92aa0cdb4021ac18e2a1aae3ea239ace7daf4bc4ccea9dc2f92e780d069041ebc181f618fe0af7830842f
SSDEEP

6144:goyMOo1A8CMv4jYietEJTatYofV3KAaZPAbhKoYEEIsEbGKhDCGrmbtPwCLt:YouMAEEJWuotaAZbhRUEaKCwmFP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27768eec27c9c3a667f5173db7810c74_JaffaCakes118

Files

27768eec27c9c3a667f5173db7810c74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

678339dd8aa7b2dbe80d4112a4c745fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetVersionExA
CreateFileA
Sleep
SetErrorMode
FreeLibrary
GlobalAlloc
CreateMutexA
GetFileAttributesA
InitializeCriticalSection
GetSystemInfo
LoadResource
RaiseException
TerminateProcess
GetLastError
VirtualFree
ExitProcess
VirtualAlloc
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_XcptFilter
_strcmpi

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE