c28e0d6f0050eb6795952df6f2cd7797_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c28e0d6f0050eb6795952df6f2cd7797_JaffaCakes118
Size

176KB
MD5

c28e0d6f0050eb6795952df6f2cd7797
SHA1

d41a22ebe28090f5108cde7db4bbd9c524db1dcc
SHA256

21ad08199fc839b51114b7d7fc4ed282e32893b5c16f62795a116882685e9ea5
SHA512

0ed86788304279d2d2809e0a5f1629b2c6dd8bb56fc6386bfb37e9e17f7b96f5ae04e8ddf6951a3d9df338f4a7772401b8171641a59bed803e0aab305a462d72
SSDEEP

3072:G87aQYTk3tiZNMb0b/viXezEfJzZC4FqeD1EafYcmKG746+Zo+NiuEGs8Wj:G4NbdXTezEBY4YeDd9mKA466oyilG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c28e0d6f0050eb6795952df6f2cd7797_JaffaCakes118

Files

c28e0d6f0050eb6795952df6f2cd7797_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xrdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ