28fa8c292c2dc5b98952f467550dee41_JaffaCakes118 | Triage

Sharing

General

Target

28fa8c292c2dc5b98952f467550dee41_JaffaCakes118
Size

578KB
MD5

28fa8c292c2dc5b98952f467550dee41
SHA1

f1c4159d80cb8f24b1ebac6410276a77f52f933c
SHA256

a0fa529a8ed7b8353d8a299fe2f1a7f7d44620036165c2c8d04b2b7a93054561
SHA512

6bded042285fb47890c988bc09d2172b3b78c9329ec194f59c4ee16e59b48921193a5fb1bb81ba361017ccb32d319d170f9933772451491e2a874bf0df556457
SSDEEP

12288:Fnfy6L3//i/0xjz8pRR92lEYEs53qNIfyM4diY:1vra/0tzGRs6s53qsypA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28fa8c292c2dc5b98952f467550dee41_JaffaCakes118

Files

28fa8c292c2dc5b98952f467550dee41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 489KB - Virtual size: 489KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ