28b3315912a7c616ea323566243334bf_JaffaCakes118 | Triage

Sharing

General

Target

28b3315912a7c616ea323566243334bf_JaffaCakes118
Size

32KB
MD5

28b3315912a7c616ea323566243334bf
SHA1

e1c4439cc5bfb5654e6e0e32260ad0b1f075ad02
SHA256

32ce826c58cb05add6ed1e986a9272f1e81dba00f0ab8e92cd3fa014b952631b
SHA512

fd3468b83a626ca06d96d8943cc08903e080b010449fa0af0a9b9604ad6dd41b901f14200a6e07e735f970a36447bd68b8405746d7b1a51030bd440c8323d16e
SSDEEP

768:lp4zJaW38oL/S6EE1jOIy3Vgddrx2+Kd:kz0S8E1EE1j3y3Vgd3Kd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28b3315912a7c616ea323566243334bf_JaffaCakes118

Files

28b3315912a7c616ea323566243334bf_JaffaCakes118
.exe windows:4 windows x64 arch:x64

02549ff92b49cce693542fc9afb10102

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
_get_pgmptr
getenv
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

kernel32

Sleep
CreateProcessA
SetUnhandledExceptionFilter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ