28044b73f839030c66e6d35e0a24d61c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28044b73f839030c66e6d35e0a24d61c_JaffaCakes118
Size

56KB
MD5

28044b73f839030c66e6d35e0a24d61c
SHA1

192afc15afc4a9ca164f3a4d0991c65ad76d3a19
SHA256

015b47c3048cb11f6989bc1cfce87e4eb0cfcf11485cce162b74a15b7294d23b
SHA512

d0a96af1db67d5fdefe7ba5baab7b65015202e42bbb9ad710ecd7dc7ecccf19fb0bb169b261559dd472b581c763dae5472bb49805aee61ed3a723d5dcefbffb8
SSDEEP

768:YcGj0hmTbssN7HS80nA0kc5JJ5wTwCz8rJxJzK1KGjBE/z:5GAUTbxHmTbB5Qwe8JxqKt/z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28044b73f839030c66e6d35e0a24d61c_JaffaCakes118

Files

28044b73f839030c66e6d35e0a24d61c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ