c28c119c110e19d7212857419007d173_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c28c119c110e19d7212857419007d173_JaffaCakes118
Size

15KB
MD5

c28c119c110e19d7212857419007d173
SHA1

0b2799ad2c1ff9d3b6c5ede7de1c34b6897e730f
SHA256

80bd3b8d82c24f347183725fbbe3584b461e17db84e5644918335515368d606d
SHA512

d615d5d200e7d42689a1d31c681f264d2aac67cdafeb875b64f19fa44aaf3a75e5c314e9f2e457b1f44064a412b62e391eb814c33ba0aba467ff37899867a437
SSDEEP

192:n7s61A/0LiwxqfKD6Vk/gqWhiQ7SQ92sGNl/B7PasljNDhcQjcW8/A/:Ix0iwxqsRQmQ92Nlp7fljphcAz8/M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c28c119c110e19d7212857419007d173_JaffaCakes118

Files

c28c119c110e19d7212857419007d173_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ