2fc69e241116a09ba4b1b70b053d9f32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fc69e241116a09ba4b1b70b053d9f32_JaffaCakes118
Size

159KB
MD5

2fc69e241116a09ba4b1b70b053d9f32
SHA1

d5d29042a0063616b2e59ff1677959e368ca192b
SHA256

dbf77b1ea68a8fca6bc7ca350a1998a87b2d2bbbc506a70648e1ff9c8911a741
SHA512

ad60f8c86ffffabe8382546901c43b7ac735797c529252c60e7caadd73704406cdb842daf11f6809e1a2d4d2bb371e51d05a44bf033907edca8a92a3c504f50a
SSDEEP

3072:HEZB94/pzXckR9TsCz8fjfkjJmh02zW7GDkHxSmwAP:HGABzMg9ngQ1mh07ywS7AP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fc69e241116a09ba4b1b70b053d9f32_JaffaCakes118

Files

2fc69e241116a09ba4b1b70b053d9f32_JaffaCakes118
.dll .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ