28682c135e634f92166b8ade1eef3fee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28682c135e634f92166b8ade1eef3fee_JaffaCakes118
Size

5KB
MD5

28682c135e634f92166b8ade1eef3fee
SHA1

09a8fa65fda8d2409b7d8541160a24af41367726
SHA256

98ad72a64c371ab989222a99251f4897684582943cc1d036c174177f57d7917b
SHA512

cf3ebbeeacf11a06c11081b7ee44731d5c0db369de5409084effd1912d27bac6897f1229bbdfb9f9dd942b27f9f82eae32abcb50289ecdcc36aab3077a8bb84e
SSDEEP

96:PJqpJrVTVmt4FlDJ+Sqt1orXeQmLscJ+LPfVEuPCMJeAFJ8U:PJuBcttGhmwcJcV/PnT8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28682c135e634f92166b8ade1eef3fee_JaffaCakes118

Files

28682c135e634f92166b8ade1eef3fee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bef3384fa8229b4551a750d3b6a19d26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
SetFilePointer
CreateFileA
GetProcAddress
LoadLibraryA
DeleteFileA
GetTempPathA
ExitProcess
WriteFile
lstrcatA
lstrcpyA
Sleep
CopyFileA

user32

wsprintfA

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA

shlwapi

PathRemoveFileSpecA

msvcrt

_itoa
sprintf
_except_handler3
_stricmp
strchr
fopen
fscanf
fclose
??3@YAXPAX@Z
??2@YAPAXI@Z

rpcrt4

UuidCreateSequential

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ