6043fa97391f0fda5cff8c9103608e3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6043fa97391f0fda5cff8c9103608e3f_JaffaCakes118
Size

1.2MB
MD5

6043fa97391f0fda5cff8c9103608e3f
SHA1

1565490c1254c99511b29a39fd0b975f7eb2ccaf
SHA256

3375643d756e06087ed0252b702bb2f5de3653e2cff5298a31dae310f285f9cc
SHA512

c15bf49b8736fcbef917a0f401747d65f9bb9f73e9b13f71eeb2e22b71ed329836dff9c5c25b3a6702fcdb2ff2a2a35de74fb9df586cfd83be32f131ee6194f4
SSDEEP

24576:YXadZ2EW/A7PB0PF+DyJVa4zViL58Xf2/ShPiTxzxB0:Ym/lyJVapGXfktTp0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6043fa97391f0fda5cff8c9103608e3f_JaffaCakes118

Files

6043fa97391f0fda5cff8c9103608e3f_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 984KB - Virtual size: 983KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ