d28fe996d3f2aed7309512422bfedc20_JaffaCakes118 | Triage

Sharing

General

Target

d28fe996d3f2aed7309512422bfedc20_JaffaCakes118
Size

307KB
MD5

d28fe996d3f2aed7309512422bfedc20
SHA1

a278b27bc13d9f9f8cc3c7dd847d3c2042bb0756
SHA256

a99627df830ef9e4119eda79cdc9f379785f3651007e927f79d50a0e50401284
SHA512

4ebbc5ba15ad7bea82cae5bb000d5ea414144e0b60a8460b18ba5b7353412f0ebb677818a1e055b51dbb2a5f2af1578dbe3a09611f17f069ec240ace4a8e570b
SSDEEP

6144:2qzUT72Y0SdzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOVPECYeixlYGickz:2CI7SSUYsY1UMqMZJYSN7wbstOV8fveh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d28fe996d3f2aed7309512422bfedc20_JaffaCakes118

Files

d28fe996d3f2aed7309512422bfedc20_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE