28b21d0528217cf25c2613413562c284_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28b21d0528217cf25c2613413562c284_JaffaCakes118
Size

232KB
MD5

28b21d0528217cf25c2613413562c284
SHA1

b502f6d32c8f5cb355d33d0539229e72af84ef42
SHA256

72b434ea24220ac9b374bce2f49b1c2666abb3d2f445d0f14299ecc3e9cda525
SHA512

8be5378cbf8d6132b349487cccac21abec687a63964443b8cb8eb9c3cc03c64b505fa6610dcf65d7e120c1bfeb1742109b40541549638ee0e5f0eda022ab7ea5
SSDEEP

6144:ALtDueqtlYSn5++I0b8UNSAgkKEkTQFmX6ezclTbP1n:ALtDueKr8+IrUNdgi26pB5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28b21d0528217cf25c2613413562c284_JaffaCakes118

Files

28b21d0528217cf25c2613413562c284_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.CODE
Size: 5KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 608.0MB

.bgyyrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ