28ed99292c09ac7c870115ceed119887_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28ed99292c09ac7c870115ceed119887_JaffaCakes118
Size

21KB
MD5

28ed99292c09ac7c870115ceed119887
SHA1

84d5e4b687018c516f7e83ff24caa48272aba5fe
SHA256

fb977bfb49a747100058b66fafe5ac0723dd488828b9576b55b1d51d66850891
SHA512

c892bcdc1f47a8bfe91121fec6706665dba38c8bfb09322f6c2d2b0fb85fd55cebe592c5ef99913f610b24d891ee8180f8373b71d59964dd53d0ac141e50fcbc
SSDEEP

192:lHVGTaFayoxn/nv9wSGhjlt/dPpbLAr1qx5HVZ5zUuXo0H1YZW2GPL8C7xzSaqMD:xVGTWaXxn/lwJlt/N/1ZdHaoPLpqMD3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ed99292c09ac7c870115ceed119887_JaffaCakes118

Files

28ed99292c09ac7c870115ceed119887_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ccf0ed7474efcf16f9cfa56b3a8c6af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
CopyFileA
SetFileAttributesA
ReadFile
WinExec
GetTickCount
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetProcessHeap
HeapAlloc
SetFilePointer
ExitProcess

user32

LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
UpdateWindow
ShowWindow
wvsprintfA

gdi32

GetStockObject

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE