2d869949f5c1a2680b48e15eb8714352_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d869949f5c1a2680b48e15eb8714352_JaffaCakes118
Size

812KB
MD5

2d869949f5c1a2680b48e15eb8714352
SHA1

ccbae1c2396cf7336efc334a5714b08343beaf93
SHA256

1d737d10d782c9ea8af35856b3deb577571b5f624df71fda09f91110f5c85c39
SHA512

4e643724ce2f096e9e6b241026f4472cedc13152e8b1370fc39a3b633421a7257cc190bb9e04f87fe3d399c60de0781f00098be16842b2ec242535c3cc19ae54
SSDEEP

24576:1OxtdBz6fMjM/9utkKWyDx3anZqyYVgvP4knkHm2ML:i4dLTF9L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d869949f5c1a2680b48e15eb8714352_JaffaCakes118

Files

2d869949f5c1a2680b48e15eb8714352_JaffaCakes118
.exe .vbs windows:5 windows x86 arch:x86 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 517KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE