28ad8560b7410456d5dbf0ae3563642b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28ad8560b7410456d5dbf0ae3563642b_JaffaCakes118
Size

500KB
MD5

28ad8560b7410456d5dbf0ae3563642b
SHA1

797ed4ee51df3c23a3bb15c7334254b89bc2869b
SHA256

bddf95591ebe715d932155cda32a00203050c2ae7f5685f4838ff2a4f439bba6
SHA512

1e302d9bb16166e64d2c2434e0bcf155079fb5799a632f3b76f7e170459a9bd678020f0356fd78220cd9f882720cbdacbc49062d645e3dab1ae3422ba182fd24
SSDEEP

12288:Z7YzULyAEZxz0TrlDS8hv8f4TBjXXltbmly/XxxOIdt:ZkQjEZxCrl5Fc4TBjHloiXiIdt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ad8560b7410456d5dbf0ae3563642b_JaffaCakes118

Files

28ad8560b7410456d5dbf0ae3563642b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 768KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 829KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 712KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE