4b95fa4786f5830cb7f0027f9d15adef_JaffaCakes118 | Triage

Sharing

General

Target

4b95fa4786f5830cb7f0027f9d15adef_JaffaCakes118
Size

861KB
MD5

4b95fa4786f5830cb7f0027f9d15adef
SHA1

feca329eaf6fabae376a15cf6908c2171fb86393
SHA256

3009ba30b32ee1b30b5c1ff5545da20237bacb418b74578ae6cfaffaa786522b
SHA512

a712857ea1a0db3267644c07395662fe39ca0e519ca402e9c63dc1fa28c36f59b994700908cb3ea7d63437d7cc25bd0a8bfeffbb13364397eb570e94e4217a5a
SSDEEP

12288:vaBBJFXixkSgfm+z5je3FqJooCGsvTuZouazcFG1hdoWt:v8RWkSguayKofvTGW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b95fa4786f5830cb7f0027f9d15adef_JaffaCakes118

Files

4b95fa4786f5830cb7f0027f9d15adef_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ