27818907909e1b8278c766cd3d9f7927_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27818907909e1b8278c766cd3d9f7927_JaffaCakes118
Size

87KB
MD5

27818907909e1b8278c766cd3d9f7927
SHA1

08add2a49d9bd3501da2fc4593c72b718ae16231
SHA256

9f2b9a8f201c50a730799b62dbd44518a15ccda3925da6303d6e032b4b6a66ea
SHA512

e13a974aba6765ed07ca9a67b8af1449490b464b381389f0138189bcb9fd8ec9aa3a2882438d1b9ddf14895b7fc1299d105ae889bd717a43ce75805f8fc8bd49
SSDEEP

1536:xYl0oFbwAblkIq4Rv9cWj286hdxNLk3rIyqJG5MxArUey0N6nzoCc7BQ:xS0s2IqYv9cch6hdxNY3yJ+wArUKNqrb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27818907909e1b8278c766cd3d9f7927_JaffaCakes118

Files

27818907909e1b8278c766cd3d9f7927_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1704b3da33714fe13129d218f43cadde

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
CharNextA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegCloseKey

oleaut32

VariantCopy

wininet

InternetOpenA

Sections

.text
Size: 19KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE