28851251790819826d768404ae138896_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28851251790819826d768404ae138896_JaffaCakes118
Size

465KB
MD5

28851251790819826d768404ae138896
SHA1

354be743a5069f4738c2a097f7885b8f848b67f6
SHA256

8fe563814184e95eb0abd7c8e9e88234b71d1ebb3cd25a16ab1e04e3aa8cbc3d
SHA512

fd4a2762b6994930833a14df2d374d840bbed6a37ae156eb799f8dbd550ea251fd6b48415509d14504c3d83d7ce4bc3853be270308ebaafbdaaeb33450b68639
SSDEEP

12288:9igdX3Zqn5AQYK1TziNd+sMEal2zplYPv6nCPV7o:cgdXYn5AQ51J9R8tlXY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28851251790819826d768404ae138896_JaffaCakes118

Files

28851251790819826d768404ae138896_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 456KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 916B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TLS
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ