28d063ca4bd5e3dbf0c87157777eff80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28d063ca4bd5e3dbf0c87157777eff80_JaffaCakes118
Size

176KB
MD5

28d063ca4bd5e3dbf0c87157777eff80
SHA1

c89c77bf92fde6fb3c126566006e0dbeed0b20b9
SHA256

ce382b837ea97f5b853e0a86897f997f1f2db88b49fbcae7bd30cf875ef4a69e
SHA512

57b4b177dddf5cef4a573ffef241aa17ee223edb64e9c3679d346656510f287907bbfcf516d30ebf6b8deb8f7179036ddd273b97cbaf96286a866ca6ff82784c
SSDEEP

3072:RsZ/nddddddddddddddddddddddddddddddddddddddddddddddddddddddddddS:Re/q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28d063ca4bd5e3dbf0c87157777eff80_JaffaCakes118

Files

28d063ca4bd5e3dbf0c87157777eff80_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ