356057763b9430c2b8bd0a413950c2e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

356057763b9430c2b8bd0a413950c2e5_JaffaCakes118
Size

378KB
MD5

356057763b9430c2b8bd0a413950c2e5
SHA1

990f9658d67f298e3aad32ea3f8d6728bf24a029
SHA256

c28dfd696d1a4b66e7b00907ba0e4882429381b3f61794945c1aab30931d6df3
SHA512

3883e0fb43cc12a55a7d9534d431dd3584fb8177052e5e70efed5d609db0da7a7e77b265537553410e7ead09f805c80ba678ff98bcd55624429602861ffa2080
SSDEEP

6144:RE4rnpKEZMjFe//K9ffwUJ7zGotFTj7hkxWgM3gCtgVb3mfpqnuv:xprwe//wJK0FTPqwHhtgmfuq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
356057763b9430c2b8bd0a413950c2e5_JaffaCakes118

Files

356057763b9430c2b8bd0a413950c2e5_JaffaCakes118
.exe .vbs windows:5 windows x86 arch:x86 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjg
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE