4a3a1fed46432cc026de88c89346c562_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a3a1fed46432cc026de88c89346c562_JaffaCakes118
Size

104KB
MD5

4a3a1fed46432cc026de88c89346c562
SHA1

d039f63fdbce66341cd4afc5a29de68f10fad896
SHA256

1c6aed442a4e9aac5999f0d92c43fe6b7c3fee204cdeba13fd7480fcb5a86e0e
SHA512

b236891b6cba48ddd85ce0e480f02ea4e1dd9d147bc43c27c166ffcb6134861226101f90f2244c881c2240ba3021fdb8b1aa6c6d1a3288a1b189a2caeb75b78c
SSDEEP

1536:DilU16JjQDYPLQsSir2b2eOg8A+4s0He6SbL1GFSv6RkZ3e4aVS93O+DZIKTihgN:Dd1iQDYPLQs7r2A4s0HzSZOyIKTA0PTH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a3a1fed46432cc026de88c89346c562_JaffaCakes118

Files

4a3a1fed46432cc026de88c89346c562_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ