4cc8eee2f3f548a9d32f4988ac4c6afd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cc8eee2f3f548a9d32f4988ac4c6afd_JaffaCakes118
Size

824KB
MD5

4cc8eee2f3f548a9d32f4988ac4c6afd
SHA1

e93da1172bf5e465362f24f5c0a9a4f89623ed5b
SHA256

b2b6b87d2d6bc704bc4577f6393e1bc5ea381a1a1b025a8f0c164313ca106d3b
SHA512

96e9f9ccb973c1fabfb7c7c925949265d0dd966240ef1a90a30f415054e9f9278ccd89f378a902eaffa5fa45867849430cae2c2184985d8c4176ba3878ed16e2
SSDEEP

12288:rLH4VKaY1h7BrATI1X11T9b/SA9kVNXamVMJoYlnjgVSpb4avgu9mquUVnXP+:QoaY7BrATIzDz9KGW+pMYgu9mq9VX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cc8eee2f3f548a9d32f4988ac4c6afd_JaffaCakes118

Files

4cc8eee2f3f548a9d32f4988ac4c6afd_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 596KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ