28b65e97257ce313d31b0db29988ad95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28b65e97257ce313d31b0db29988ad95_JaffaCakes118
Size

33KB
MD5

28b65e97257ce313d31b0db29988ad95
SHA1

5490f4e278d9714d250fd1d4fa61df29eb55b8d8
SHA256

2bc5f0b372d0b860005f9b6719c90fd72566ba3b6e7798df06a947153efd6c78
SHA512

10fc9c80e3505e6e15f250351c57cfcec17f2550e0eabbdc8daf8c09aabd8b7f85eebe63d509e3c6eda80554f7c3da82a2adc8289f400942be5407d277f62328
SSDEEP

768:rwsU8iDR2lleK79M0HxeiC+kP5mDSr5kRMULX+:rLUelHyhVx5m48LX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28b65e97257ce313d31b0db29988ad95_JaffaCakes118

Files

28b65e97257ce313d31b0db29988ad95_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ