28ecec70ab6c15ec6cd50b9f461711e1_JaffaCakes118 | Triage

Sharing

General

Target

28ecec70ab6c15ec6cd50b9f461711e1_JaffaCakes118
Size

641KB
MD5

28ecec70ab6c15ec6cd50b9f461711e1
SHA1

8fb1fd2922144c9ba3afa06a2de4b02e2f415f48
SHA256

8c66654b8d50efed2582d27a73fa959ca1b9675c2a93778514be1b3b2a963840
SHA512

528b37e15cf67d071d931973cb83aaf7863855fddf5494730901f103aa15d9c8a6e8a4d33d9178b34b1df35928682d01ab246c8f9bbcff89bcb79af70544636d
SSDEEP

12288:7q+ofLruQnLrEZN7PpOr++Y9saNzcQGcq7B4TgEcLTv:knL/ZMsaNzcQuOEE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ecec70ab6c15ec6cd50b9f461711e1_JaffaCakes118

Files

28ecec70ab6c15ec6cd50b9f461711e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ