28d33f9430d3b4124e81afa84d34ebc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28d33f9430d3b4124e81afa84d34ebc9_JaffaCakes118
Size

198KB
MD5

28d33f9430d3b4124e81afa84d34ebc9
SHA1

d33b1612b6dc63ed5f063c20f40e0e1db9071a5c
SHA256

d37e5c00cb7da5b7055fd1513704ce9251f4e54c3f4b47d19d8358dafc8b8650
SHA512

5b9939917dff9346c9ab157747a04040ee30e68368b29a91647a9e99ed3edab6bf8bbbb1c7f19b9d9268b3debbca062f3495dcf6372cdbe6f4cc14b77b153d46
SSDEEP

1536:P5qVQyh9j7EhyNPGQuZ7d+ILNP16jCJQL6O4F98mL75hihbaOe4AfOBdyP4LG9Lx:wxhppTu3pNPYjCJ3rfQJzaMK4Tkx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28d33f9430d3b4124e81afa84d34ebc9_JaffaCakes118

Files

28d33f9430d3b4124e81afa84d34ebc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ