28b3c691d7aa57e0b00dbd50fa862ab7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28b3c691d7aa57e0b00dbd50fa862ab7_JaffaCakes118
Size

41KB
MD5

28b3c691d7aa57e0b00dbd50fa862ab7
SHA1

7d2029b7f95c1b5a31233f29d6ae99b3264581a7
SHA256

7353a995bb0af3717f9ed29031eeaec074c4b2819769d1428b0263a5fc301e2e
SHA512

e18661ff638970cd18bf04131de61a74a0349fec70c1a37ea8ffd7a9cdbb6fb95659c044c4421b562ef67d1f224ec7c291d8f6efe20d65a87af5ea17a9600f72
SSDEEP

768:GqoS6CFTsefycANJr2nwu7DoPoshxSHVFK4Dtjs:Gqp6GTseqcCq1VF/DNs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28b3c691d7aa57e0b00dbd50fa862ab7_JaffaCakes118

Files

28b3c691d7aa57e0b00dbd50fa862ab7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02da2be5102810da6706c418786bcd9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect

user32

DialogBoxParamW
GetCursorPos
GetMessageW
IsClipboardFormatAvailable

Sections

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 26KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rel
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE