28256c74fe0b4c7ae7e77492d8ae2b55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28256c74fe0b4c7ae7e77492d8ae2b55_JaffaCakes118
Size

363KB
MD5

28256c74fe0b4c7ae7e77492d8ae2b55
SHA1

4cacace1b6731511c4bb75949c0263ec86d795c3
SHA256

dab01d082d2bef260ebe94494f167db336dcfc0565effed435bb2b6a1363dff8
SHA512

650f214e3d172b451666a301017dc2029191bcf49d1de87eefbc8217eab46e689cd502484da2894c7c5f8311be2b8744f27aa04fde4ef51de7f7847ccc21204a
SSDEEP

6144:RBt9n/GZFJgsaIQ7xCLnlnHNK9GSE5l2bGz+rLsb0fXpJI4EMlT:RBTyZmxSNKquGz+rgIZEC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28256c74fe0b4c7ae7e77492d8ae2b55_JaffaCakes118

Files

28256c74fe0b4c7ae7e77492d8ae2b55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ximera
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE