28d21fae910abdfd7f20f26c6e1115dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28d21fae910abdfd7f20f26c6e1115dc_JaffaCakes118
Size

4KB
MD5

28d21fae910abdfd7f20f26c6e1115dc
SHA1

75e007ff80615f4dc2eb1819cf22a32273f1390a
SHA256

cdd3e730a1534a321b76d3becaacffa9ada12c0e8256bb5ff51ca55cdffcca03
SHA512

5a4f453dd497652059deb3113c6f9bba4c3faf231adc776553d93935cbd23f4ecf9d92d1c3f654ceda0512c4a14430ead2966a1b433bfc15c81dcdae788b21bd
SSDEEP

48:aznHBepXmmayAt5jiUWG2JfiTnls85/YUGUwisiBcJdjo1DtV:zpXLayAtlzD/YUPwkyJsDt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28d21fae910abdfd7f20f26c6e1115dc_JaffaCakes118

Files

28d21fae910abdfd7f20f26c6e1115dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6af48c7a7d63b2c8c4c1c11edc2ffdfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA

kernel32

GetFileSize
lstrcpynA
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
FlushViewOfFile
GetCommandLineA
GetProcAddress
GetSystemTime
LoadLibraryA
MapViewOfFile
UnmapViewOfFile

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ