e28b95ce0333d6aa8405f552120b4840_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e28b95ce0333d6aa8405f552120b4840_JaffaCakes118
Size

113KB
MD5

e28b95ce0333d6aa8405f552120b4840
SHA1

40f689378bc41d1b53c443f23e9ae2998abc6371
SHA256

8f553c41c15f6f5abceb600ac6da362912049223be647e35041ba13f2ee7946d
SHA512

29eef4eedd0f33d504c4e418b58bf65d94cd2dca60710efdd24858df78b68356a3b8ab36492d4b942f54880dfeb66727b3622e00ff84c8d9b427e1ab2e553064
SSDEEP

3072:hxsN2+1/vmWZLne0/W4/mlLGrPTECT1FqWiXluTL4+:h82yzXVJ6wLX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e28b95ce0333d6aa8405f552120b4840_JaffaCakes118

Files

e28b95ce0333d6aa8405f552120b4840_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c011b07db4b256622c54e2f559cb2112

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
lstrlenA
ReadFileScatter
DisconnectNamedPipe
CreateConsoleScreenBuffer
GetSystemTime
HeapAlloc
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ