b28f8310cb92f5db49c65cf77b4dab13_JaffaCakes118 | Triage

Sharing

General

Target

b28f8310cb92f5db49c65cf77b4dab13_JaffaCakes118
Size

187KB
MD5

b28f8310cb92f5db49c65cf77b4dab13
SHA1

0657be4d3ea9437db3d7d4b880093aa65755ad14
SHA256

06e052f9031bb16ba3d3fca5e5e4978aa10a43b654028ba898abc4bd6b81b9aa
SHA512

adac7e0fdac1cf6c4ccb5be4c15356e30b1e6f00a9c5a5b3b1ed0d71f324cc40ad89984a0040d87feab855d551902ff357b100bafa7d854c0c1d95e216b7e1c2
SSDEEP

3072:NrFkY0W+dNGryWlLin61AOTQJ/FtMVKVGxbfT/j/MwG:BExNGeSWeAOTiUo6DXk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b28f8310cb92f5db49c65cf77b4dab13_JaffaCakes118

Files

b28f8310cb92f5db49c65cf77b4dab13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B.SS
Size: - Virtual size: 285B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 33B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ