28c93ee4d278a020c878f925db0c871e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28c93ee4d278a020c878f925db0c871e_JaffaCakes118
Size

404KB
MD5

28c93ee4d278a020c878f925db0c871e
SHA1

6b78d5e5fd4ef0e91fd94d9cfd4f23ce0b5492f2
SHA256

69499b60b6d99481cb1be4c5c23de8d03492c3a351e5d60ac660f17f5bd66868
SHA512

685a26e831459ab7df58215655e7530a5c0bcc8e9fafd6a84127afafa142b9098c06bf82c5483aeda03ff1dbdeb2ac168b99a4f66c2fb7cff5225c1f4393e529
SSDEEP

6144:wr2Ffu9pkG0FzGYNdVturVyPoagX33if8oVw6c5fvI0azOrxWIOIjXQkeUVC8iXT:3fu9pkGelPUBNvISOKAkUrT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28c93ee4d278a020c878f925db0c871e_JaffaCakes118

Files

28c93ee4d278a020c878f925db0c871e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 343KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ