28ff481449e69d9b27d64c74aa7c7925_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28ff481449e69d9b27d64c74aa7c7925_JaffaCakes118
Size

67KB
MD5

28ff481449e69d9b27d64c74aa7c7925
SHA1

419d8782a67b6d5ed9ecb737060b1f5fd00f84aa
SHA256

8ebe32f94560ad96b7a1fe1298b8b4b3de6bae3ed76301198ad2cad723a7fc46
SHA512

cc0ada227902485ba0e73cd5f4ee95b1da01263455c19441293c6cbe5c9817da18f63bc3779e1afa84ca6176427fc50e7a2c1ce7a84832f25f7907f47ab911b5
SSDEEP

1536:F425wFfbtdBiqKRqfrOh+MLwi7ZvE8Lpbe2bNqOCh9EnItcZwjrCWurL9eh8EpWq:FILB0gDOgi9vZ1bDbNqOCnu+8k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ff481449e69d9b27d64c74aa7c7925_JaffaCakes118

Files

28ff481449e69d9b27d64c74aa7c7925_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Sections

.rdata
Size: 18KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ