28e6c61b47a8e7f2baa02459b05c324b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28e6c61b47a8e7f2baa02459b05c324b_JaffaCakes118
Size

60KB
MD5

28e6c61b47a8e7f2baa02459b05c324b
SHA1

05ec0431a628f0a8d8234eaf094c1d5ba5fcbadd
SHA256

48916022784959dd4258bc3166d75d92242faa2a752ed95899c96b51ac6151bd
SHA512

7cd97b59bf955eda2a7c9b0093c285238fdbb31d305ed800e54df48c9901b1fa98a165e7bccca4683b99b42fe4488e928e4d16c53f5ed6b90c69bfb2f6b1cb2f
SSDEEP

768:Cj6t84+ClOeJiepLrMTmM7Lu+icxQva+m64K/LavzI5dELza19w/D014z4aBAk:EebJpLgCcnicxGlt4QYLU9KD02BBAk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28e6c61b47a8e7f2baa02459b05c324b_JaffaCakes118

Files

28e6c61b47a8e7f2baa02459b05c324b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ