72f4dfc5cebf5f7980141d3985239391_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72f4dfc5cebf5f7980141d3985239391_JaffaCakes118
Size

306KB
MD5

72f4dfc5cebf5f7980141d3985239391
SHA1

81f3d3a72c293ccbe2e3f0a4ad45fbdfc0dec90c
SHA256

c6948da99ddd051f16484ce6a91af374505c3ff9f2dc3ac2d2343eac31993056
SHA512

c552eac00cac82d9a2818b4781aefbb6d02e81326c4f5e15ef3faab07ed061fa09d663650c4be8576c0745c5d53b244d8aca5fe932a114184b3397ac953afbbf
SSDEEP

6144:s9Y2m/BppLg4ebqIzAkMGjdNu7VlJizZN2TMu4bGAMc:NvZp5g4ebZ0k/upziDIEMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72f4dfc5cebf5f7980141d3985239391_JaffaCakes118

Files

72f4dfc5cebf5f7980141d3985239391_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

yC
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE