028e2c24f93656431b8023e98991c117_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

028e2c24f93656431b8023e98991c117_JaffaCakes118
Size

703KB
MD5

028e2c24f93656431b8023e98991c117
SHA1

112dc24e0ec03612103942efe14147bf9eb6d6db
SHA256

98c48c13e36333a0bed0b7828d96e8f8421f3be0e32326b85314c56cef84a7d0
SHA512

b81eb5dccf0b9d5c3a099479886115954ff0b395a20a77d4de80b40d0305783941c20e5c34b16f88adad9229818fed9dca86ab907963eab9d369f3308030048f
SSDEEP

12288:9pJaBsovsJ54wB5tvU9f2ueHdN3D3Xmegs8sv5jDJK/2ySVc0LrSg3:PwHv4RvR/zGe98svZMqm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028e2c24f93656431b8023e98991c117_JaffaCakes118

Files

028e2c24f93656431b8023e98991c117_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 604KB - Virtual size: 603KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ