28f66b81bb549e7bf226572e006160e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28f66b81bb549e7bf226572e006160e5_JaffaCakes118
Size

63KB
MD5

28f66b81bb549e7bf226572e006160e5
SHA1

a461edf2581ca2734712b4e0f9688850a15d14b5
SHA256

755e31ddfa2bdfd2876fd4f3fafa9418bc51e58c916906d88ca52c73e8bf591f
SHA512

8534877a2aeef1e7e843159bc33e9f8fc35668f6b64d3fc41713901ee34ee954472a88367ca7a5803c40c7edb4213560334e828419f17a47c3fa795211f13efa
SSDEEP

1536:q8Xn9gehwoIKgtJUesue9PiN4KRW+GumQBnguz:qWn9goIHUeZNI+mQBgE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28f66b81bb549e7bf226572e006160e5_JaffaCakes118

Files

28f66b81bb549e7bf226572e006160e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d15a092e55decf6ccf1ab9b23e4b0378

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
WriteConsoleInputW
ReadConsoleOutputCharacterA
InitializeCriticalSection
EndUpdateResourceW
GetStringTypeA
EnumResourceLanguagesW
SetCalendarInfoW
FindNextFileW
GetConsoleAliasExesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE