28644adca08a96653daef4a60b00cb4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28644adca08a96653daef4a60b00cb4c_JaffaCakes118
Size

104KB
MD5

28644adca08a96653daef4a60b00cb4c
SHA1

c02145221f82f754724e1a3d70d293216997e53c
SHA256

1e38799ffcd4afaf0e0628d83e3934b136524f40410efe29883f7e1ab1c5012c
SHA512

4bf155c642a887ef1f393efc169407d23d5bcef5c14d172c900ba728daa5e98ea967cebe4ffe78cde4657244176589d474cc83d020c07eb44d47dd679ea4d554
SSDEEP

3072:3Aqble/bkTAaiXvFLy6iUJOsC3ggRn/Lp:dh0QTAai/xGUAd3gmT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28644adca08a96653daef4a60b00cb4c_JaffaCakes118

Files

28644adca08a96653daef4a60b00cb4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7aba6110d0b2fbab69f5445674eff8a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetVersion
LoadLibraryA
VirtualProtect
lstrcmpiA

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ