28ac71e9668e3cbb94ea7d58e70ba835_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28ac71e9668e3cbb94ea7d58e70ba835_JaffaCakes118
Size

465KB
MD5

28ac71e9668e3cbb94ea7d58e70ba835
SHA1

740e4f17108848d0f66b5d2f42f36e00f0bc8787
SHA256

e3b746a8959d2fde65a9aef20403962266c168d62cf0abfa2233cff338ab0d55
SHA512

e197d27c57509532e51e4e9a996aeb0fbf96859d4bd80e8002e2ae3fa1fac29fd5997de2ba8a1232e686e5915684326622599f40caff5e19d2315737881e90cf
SSDEEP

12288:ZCxoREAvgp8oSd+XkQLj/2X0W81wsASmgfWr:wyRTvXd+jjeXtjWmg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ac71e9668e3cbb94ea7d58e70ba835_JaffaCakes118

Files

28ac71e9668e3cbb94ea7d58e70ba835_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 452KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE