28f2fbbaeedc710926c10dbc1841dbd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28f2fbbaeedc710926c10dbc1841dbd6_JaffaCakes118
Size

24KB
MD5

28f2fbbaeedc710926c10dbc1841dbd6
SHA1

bc75befb1a0a3b33545bfb552aa6b141d0e5d9d8
SHA256

50c34a8ff518bc411b4e74a9ff44776fe4420529850995bc81b2e2ace655b6e9
SHA512

40d371d874bdc45811630180c82cb31b9a051bbbfca3444d71835a1f0a2228c7cfda3fb156a3e017e57861e40432543f37f7782d11a70503615e5266021c41b1
SSDEEP

192:elAUqRLAB0iTxVcbNulYdtxti6oVP1oyMkZB5j2KQ9Z1:CAUqRLo0iTLcbNrdDtid1TN2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28f2fbbaeedc710926c10dbc1841dbd6_JaffaCakes118

Files

28f2fbbaeedc710926c10dbc1841dbd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbff55428b6e380a50dc67c2418d384b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
DeleteFileA
CloseHandle
WriteFile
CreateFileA
FreeLibrary
GetModuleFileNameA
CreateProcessA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetProcAddress
LoadLibraryA
Sleep
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
ispunct
isprint
islower
isgraph
isdigit
rand
srand
time
_except_handler3
isalnum
div
ceil
__CxxFrameHandler
atol
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_access
isalpha
_itoa

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ