28ab5e78f3bd23253e70699cfb2b6fc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28ab5e78f3bd23253e70699cfb2b6fc5_JaffaCakes118
Size

177KB
MD5

28ab5e78f3bd23253e70699cfb2b6fc5
SHA1

23624e744348c52eeebc733aa5ac415437834873
SHA256

87eea2796c0baa5f1f7d082eaee114e1ec642e637bebbadc14852cde8c4b1a06
SHA512

ede28e2b8439fab75aec52e92c48f66189905dc19b5eec7ae2b9ab74fc7f480266689910513bdbc35709438494956fc9392372b6ecd057a301bebbce685acacf
SSDEEP

3072:ohXRHR8TJPDCwxz6hz08k/n090Dw/IGhmLt+4lb4IZTU4HmeWcSYE:gRHR8tGwxzS08k/n80MqvUIZfmeUY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ab5e78f3bd23253e70699cfb2b6fc5_JaffaCakes118

Files

28ab5e78f3bd23253e70699cfb2b6fc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96ce1cf7f77b112b253f3217da1c5edc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

StrStrA
StrChrIA
ShellExecuteA
SHGetSpecialFolderPathA

kernel32

CopyFileA
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
LockResource
LoadResource
GetModuleHandleA
FindResourceA
ExitProcess
CreateFileA
CloseHandle

Sections

.text
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE