5b8c6a4888587cb0e7a1a6b38df9677f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b8c6a4888587cb0e7a1a6b38df9677f_JaffaCakes118
Size

72KB
MD5

5b8c6a4888587cb0e7a1a6b38df9677f
SHA1

48b1904d675200a9eed06a122f227dd0328af57d
SHA256

6f42ce6f0d641373bb0802e88abeb96f449ab4e19c727574d0110f6ad4a7b715
SHA512

606b1afc58714b273aa0f143f1b0081b3daeda368ff932198dc39c7ddba5d9eea3dcd7729e47e42cecfc165ca67595cfc18ba379153831bed6fa22c35457bc00
SSDEEP

1536:r8ql7Qri+Q0DAFaHun9+djBZHDG9/paRS1zgQx:RGLTAFaHU9mjBZjwhaRSGQx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b8c6a4888587cb0e7a1a6b38df9677f_JaffaCakes118

Files

5b8c6a4888587cb0e7a1a6b38df9677f_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ