28a485b9b92eb0524b3df7dc1d64261a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28a485b9b92eb0524b3df7dc1d64261a_JaffaCakes118
Size

6.0MB
MD5

28a485b9b92eb0524b3df7dc1d64261a
SHA1

eab01b78bc747748aefe9089d71ba6e0a857f8f2
SHA256

4086d30f4d25c5c237402750b946e3a72abba6166edd1ade065a0a33de76f33b
SHA512

4c37be5e6fc2332b9c044e215e3654de3ea0a76b4249c9618add297f51adc9efa8be1f441d40534ebfe76530068cd75fcc8ff058532b175f67a592669c05962b
SSDEEP

98304:NMSWizku7GpT4MqKyMup/7KgOtX2YRuGNcHrIvHQhu2IgREtpgG/X9U0M14iNfq:NjYaFPp2gOsCuGNWwQnG/Xq004Uq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28a485b9b92eb0524b3df7dc1d64261a_JaffaCakes118

Files

28a485b9b92eb0524b3df7dc1d64261a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ