28c2f4e13d54a1c967b618eba9afe837_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28c2f4e13d54a1c967b618eba9afe837_JaffaCakes118
Size

158KB
MD5

28c2f4e13d54a1c967b618eba9afe837
SHA1

fa772cb375725bc9cab61a3f41d6584a0d0af7eb
SHA256

cf102167b15e9e323afc0ee45224487fba944fde8972f1c0e2ce46ebca04db60
SHA512

9658a63a6215b3cf75cdeacdb3ad3669a6ffbfa2916cce131643a8cbc4b663f377fe0905cee5cc66b9be7af1c3a9014bd187375daf2f5bed1b9d67a85dfca88a
SSDEEP

3072:9fKzWmovZnk+rTXmpCxBQXTlxURMaQxJLoKFo:92ZoK8qsMyy9B2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28c2f4e13d54a1c967b618eba9afe837_JaffaCakes118

Files

28c2f4e13d54a1c967b618eba9afe837_JaffaCakes118
.exe windows:5 windows x86 arch:x86

46b967ad77bf600e0dc47f9225f7cfb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegGetKeySecurity
RegCreateKeyA
RegOpenKeyExW

kernel32

lstrcatA
GetLocalTime
FormatMessageA
ExitThread
lstrcmpA
CreateDirectoryA
GetStdHandle
FreeResource
CopyFileA
CompareStringA
GetPriorityClass
OpenFileMappingA
ExitProcess
GetFileTime
HeapAlloc
CopyFileExA
GetCPInfo
GlobalFree
lstrlenA

user32

CopyRect
DialogBoxParamW

Sections

.8cea
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.f67b
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.48g1
Size: 118KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.da11
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.28fgb
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ