227d4203f64f98a52dc9802f86e11a13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

227d4203f64f98a52dc9802f86e11a13_JaffaCakes118
Size

180KB
MD5

227d4203f64f98a52dc9802f86e11a13
SHA1

ed7f49cebbbe0040d27b99887d4635163bfe52ae
SHA256

898b675891d90d11131023502208265483e289cc7ed45b5cd8c1fc91083fa382
SHA512

f0c6cb10e048a4ed32663d296894422c89757cf620b294e540ca24dfaedb26de09b09485814042b0eefd0b4d0351a85921476d99ec07b1a1c7aaf629570666c3
SSDEEP

3072:mCXUDKc29qLDNMg0/yT4ioh2xpmTiMUrqBvs575jYOH4pP:mOb9qVMg0/yDoQpnLqO57xYpP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
227d4203f64f98a52dc9802f86e11a13_JaffaCakes118

Files

227d4203f64f98a52dc9802f86e11a13_JaffaCakes118
.dll .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ