28a7ffe86ae0df7e31478915ad51c8b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28a7ffe86ae0df7e31478915ad51c8b3_JaffaCakes118
Size

10KB
MD5

28a7ffe86ae0df7e31478915ad51c8b3
SHA1

4e71dfe448b6e624a28764ccfd67c4fdb610296a
SHA256

02bb4ae84d3af6235a14d6b1f54c46411b057a22658bfb7410f79bea052595b9
SHA512

fe699eca6b0c813251ecbad522800ed94e8b6b00bf36b7aa56b46e623bdec45ab681609eeeea49ac5704b3013affcdb7e130eb1aa61c705daca42a0b273001e2
SSDEEP

192:FBEcvnwR2kBAxKuqDLE0l3dCD+IK3Zl6yc6:csnwR2kBWqPH3dChoZ9c6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28a7ffe86ae0df7e31478915ad51c8b3_JaffaCakes118

Files

28a7ffe86ae0df7e31478915ad51c8b3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ