27af487cac625729786bbd14b31c9762_JaffaCakes118

General

Target

27af487cac625729786bbd14b31c9762_JaffaCakes118
Size

622KB
MD5

27af487cac625729786bbd14b31c9762
SHA1

eeef67624fa34e171bdc37d806b3c5a08220dfff
SHA256

9cb7db9febc083405f692ad30597dacdadde9bdd1c36d9e99a4134d5b5a218f0
SHA512

bfca5e128b35370692f245538aa3723c06ac3cc2bd46f6cc7bdbdb4fabf14c9eb68dc9cab4b5ef67831e69b9f5fb39a4ac1ba0492915eedbe92651e9e3576474
SSDEEP

12288:aT0lFvMxbssPFeqg/VStSKC3dk6DRNsMgRoEKwEMYhykwXgh28aNB:aTSMisPFUSt7CbRNNw9EQH6xe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27af487cac625729786bbd14b31c9762_JaffaCakes118

Files

27af487cac625729786bbd14b31c9762_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f62aa2bddbdbd2ec350c33fdf8a88b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
SetFileAttributesA
GetSystemDirectoryA
LoadResource
FindResourceA
GetVersion
SetFileTime
CreateFileA
CloseHandle
GetLastError
VirtualAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
MoveFileExA
GetWindowsDirectoryA
SetFilePointer
GetProcAddress
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
GetEnvironmentStrings
LoadLibraryA
GetEnvironmentStringsW
WritePrivateProfileStringA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
ExitProcess
FreeEnvironmentStringsW
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapFree
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA

user32

CreateDialogParamA
GetActiveWindow
SetCursor
GetLastActivePopup
MessageBoxA
LoadCursorA
GetDlgItem
DestroyWindow
wsprintfA
SetWindowTextA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f62aa2bddbdbd2ec350c33fdf8a88b7

Headers

File Characteristics

Imports

kernel32

user32

version

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 21KB

.rsrc Size: 578KB - Virtual size: 577KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 21KB

.rsrc
Size: 578KB - Virtual size: 577KB