454ed715d758f4b6dd092fd8a4086193_JaffaCakes118 | Triage

Sharing

General

Target

454ed715d758f4b6dd092fd8a4086193_JaffaCakes118
Size

872KB
MD5

454ed715d758f4b6dd092fd8a4086193
SHA1

d20e9ff826bb619997bb63b09b92cdd525de1e2c
SHA256

6432215c822c0522ffdd0786c95b01e1e0f7084505e1830c100c5ae77fc58154
SHA512

f93f99afb6d78381dd8918b14e825e82d934140d9ecf7e8b82f81faf012391b4d79144c9328ea271eef3a4df21c690d3a4eb0e0a93ae04278df400bb8b43c64b
SSDEEP

24576:hYsb2EoV1IuZcP3x4Zj8xe6vBJPOm9vwNJtLp:OcAIuMP3P0Dl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
454ed715d758f4b6dd092fd8a4086193_JaffaCakes118

Files

454ed715d758f4b6dd092fd8a4086193_JaffaCakes118
.exe .vbs windows:5 windows x86 arch:x86 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 571KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oli
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE