28113af986bc65a20e53d45b500de522_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28113af986bc65a20e53d45b500de522_JaffaCakes118
Size

325KB
MD5

28113af986bc65a20e53d45b500de522
SHA1

33c683dabc1e47b171397645adeb974a0afed2a1
SHA256

32b979a01ca07e00d2dff6a809c7695cadb0ed720c00545ef55c4dda44efb32b
SHA512

224053ab3257f083fa115b50b77011820a630a55f6f933401c53dabbd03bf6b2f773a9f3e7408ce575d81b2e997f8672dfd06e9b630496e4c76a841dd1b63e63
SSDEEP

6144:P7h3p5XuCt7+kBkRlfrTbJ/hC9CS57X96p4Acpl4fvAlhs3DbM:PF3p5Xug6kBkHTHJMES57wCAsKAHkDb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28113af986bc65a20e53d45b500de522_JaffaCakes118

Files

28113af986bc65a20e53d45b500de522_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3d74c36cde6acaf008f30a2d6bf908be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCurrentProcessId
VirtualAlloc
GetStartupInfoW
GetProcAddress
GetCurrentThreadId
GetSystemTimeAsFileTime
LoadLibraryW
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
LoadLibraryA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 150KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ