28873cb2b11d5d5358d0a89b052d0e33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28873cb2b11d5d5358d0a89b052d0e33_JaffaCakes118
Size

172KB
MD5

28873cb2b11d5d5358d0a89b052d0e33
SHA1

5ea1b98c3cbb78eb6f7b2d80aa81168b24ec1d3e
SHA256

73a3ede439b7834c85c3a3bea44db7d71db0ef53a0260488c3d609e6dd6631cf
SHA512

5a5e713de3b563e6db4d57ca9869595a25c3b3302bf1c5eee15f308434f23455a73216037a6fe7240849e88a9103cc8023c7e457ae0ab0b106196ffaae5fe287
SSDEEP

1536:HwtPGEMAAF6OpCzdXpDGxysBttmiJE/RT6U0RRugoXkMMkv3mRk6:invOqXpDGdXmiJEJmoN0MM43mi6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28873cb2b11d5d5358d0a89b052d0e33_JaffaCakes118

Files

28873cb2b11d5d5358d0a89b052d0e33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79c5df1d1257e77fc7795d07e8c495dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetLastError
GetCurrentProcess
LoadLibraryA
lstrcatA
GetProcAddress
GetTickCount
ExitProcess
CreateMutexA
Sleep

user32

wsprintfA
MessageBoxA

msvcrt

??2@YAPAXI@Z

Sections

nnno0
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ