28f08f83d69e1ee58d1063f59bb6a8ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28f08f83d69e1ee58d1063f59bb6a8ae_JaffaCakes118
Size

139KB
MD5

28f08f83d69e1ee58d1063f59bb6a8ae
SHA1

b861f35545176fb0c51b2bbaa37187691636324b
SHA256

77649dcee83c0ac168980f2d9e70bdcf9cdfbc03bf8c239eed4ddb25864f2dcf
SHA512

f42b500ae2c4e8f719c7d90a4079c98124570d62b2720c4d2d2d2c5af692085741e170786c8ae8c15d8febed8f29b5ac01bb5f8a308538961a662804227ded1a
SSDEEP

3072:+uc65K4cqqSZGOQqXyF8thT+LDbo4bTHuOElIBK1ADVkq7bvajRldfQ:BbwzqqGyaN430lGDWq7bvafdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28f08f83d69e1ee58d1063f59bb6a8ae_JaffaCakes118

Files

28f08f83d69e1ee58d1063f59bb6a8ae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cbfd62d06c382d242260fb644b73cd08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

UrlIsOpaqueA

kernel32

IsDBCSLeadByte

Exports

Exports

ActionPlaY
?TemplateMessage@@YG_JUAPI_VERSION@@U_LOCALSUBTHREADIDCOMMON@@@Y

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.0xA145
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ