28fae65cb849b936e71e553466f21c16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28fae65cb849b936e71e553466f21c16_JaffaCakes118
Size

30KB
MD5

28fae65cb849b936e71e553466f21c16
SHA1

e6d0fbb49372089e8c52a0765e8149e4dd9eafa2
SHA256

b388a602bcfd9c2c3807fb33f30f2b035556fb8726326a3e7768b5ce8476260f
SHA512

a62b5bea0a7f2d02e48d8bbc37e8ee6ae9aeb0df8da1ed8730fbb4f9e61a581c91568414a8fc6df63705f6ee68b9575ecca0d42117a2091962a68e452a503280
SSDEEP

384:Byuzmk3ySFy81TvV5OFz9X30WkOAYoM1LoZrL5v7Tlqr/vRhYaxC131AN1su1M1F:fM81TvV5EZ30WoceUvz8L30U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28fae65cb849b936e71e553466f21c16_JaffaCakes118

Files

28fae65cb849b936e71e553466f21c16_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

tanlt88

Sections

CODE
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ