28a0bcda107fb1e915b3ec7e066a6e29_JaffaCakes118 | Triage

Sharing

General

Target

28a0bcda107fb1e915b3ec7e066a6e29_JaffaCakes118
Size

2.4MB
MD5

28a0bcda107fb1e915b3ec7e066a6e29
SHA1

bd99449f74591310c782e71c882f38c4c3f39c0b
SHA256

71ed926faa587e2474903f5c0bb521d4a25c0e7dee983de3ec3ca820b6608268
SHA512

bc08c781b850b0f60ad39ff2ebbf5ce2c4d1049d073f059b2e50606e5f5982ccff1c6712af7bb9028cf023770d4271f98dca0f4039cc0e86ba3416364769bbac
SSDEEP

49152:g7LpqPnAU0nJtOCsglhUDWA1/Y6jyq5r4Flw/HD5:G2+LFsfrdjB5Eg/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28a0bcda107fb1e915b3ec7e066a6e29_JaffaCakes118

Files

28a0bcda107fb1e915b3ec7e066a6e29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 364KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ