28d505f99a0b781b976ef86e13a424cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28d505f99a0b781b976ef86e13a424cd_JaffaCakes118
Size

71KB
MD5

28d505f99a0b781b976ef86e13a424cd
SHA1

7a77b496db4d2bd7a81bf0dc494f90b203e5b5ad
SHA256

64486c3163acea740cfc913f5e0e855c8e623ef25cf4b5b73687f778a1dbffbe
SHA512

27b4d2e6ed98df62a449d182d2e53b839656cb02590c24426ce5b10df1e622fea6c42fe912cf31c768111d5dcb81f4de9b6dab6281633ccfaa603baf608708d9
SSDEEP

1536:fVTbRgB7STuyxUSYAhz0lutrLy1aEMtE7lh3OxZQELU1UZyyzGzOoD5YF5hbudi:fZbe6Rx3J+qtE7n+jQ66ZD5Y5udi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28d505f99a0b781b976ef86e13a424cd_JaffaCakes118

Files

28d505f99a0b781b976ef86e13a424cd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

987ef8489123ea2806b1bb7415f1b578

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
__setusermatherr
__set_app_type
free
strncmp
fprintf
exit
fwrite
strlen
malloc
_XcptFilter
fclose
_except_handler3
_onexit
strcmp
sin
_acmdln
__p__commode
_adjust_fdiv
fopen
__getmainargs
strstr
_initterm

user32

GetDesktopWindow

kernel32

GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ