28bc3c7b0102d7e678c0aaa3fa5006bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28bc3c7b0102d7e678c0aaa3fa5006bc_JaffaCakes118
Size

181KB
MD5

28bc3c7b0102d7e678c0aaa3fa5006bc
SHA1

687fc39d111eaf02b22d41c66e4320fdc279f8bb
SHA256

4109e8a2d03f4d9b468d2752ee3556e269222133a3a87999221b94d191b995da
SHA512

a77e7a360133a8b19ff3d444ee235db95211c313b328330148b085024587494bf3e0144ee5c80de72f0a887281c98c6aacab439ce10336be1dd43b1f1179775b
SSDEEP

3072:GmZ3YUWhyE0zF0CYkenkl4GeS4ni8xB3oCZJGi1qWdk:5bjzGpkeklA4iB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28bc3c7b0102d7e678c0aaa3fa5006bc_JaffaCakes118

Files

28bc3c7b0102d7e678c0aaa3fa5006bc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

45a03c0871e08804f0e8b612045e17b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
__p__fmode
_except_handler3
_adjust_fdiv
_acmdln
__setusermatherr
__set_app_type
__p__commode
__getmainargs
_XcptFilter
exit
log

kernel32

GetModuleHandleA
GetStartupInfoA
VirtualProtect

user32

FindWindowA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ