85170155470cfac71553ba6bd4d1e390_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85170155470cfac71553ba6bd4d1e390_JaffaCakes118
Size

984KB
MD5

85170155470cfac71553ba6bd4d1e390
SHA1

8ee76d46511424f40d086b29c38be77bbbbbcab4
SHA256

b11465c8b66635a288fe15a253bb0cc758a69f7b69b56ef5062d17c8d9869677
SHA512

91b309aeeb9c9cf923034664fa88977206684eb0abba1f8571d457816e2b8ce405a3e2d96861916b8dd38a0e1b660440b91f3652b991a64004017f8f0fb2f7f4
SSDEEP

24576:yYUSIJ3J+Rt1UiUKoYRQQRDz5SmEM+vTGe/Vn371oaqU6m:8SYEFUxQRR6M+xhCtm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85170155470cfac71553ba6bd4d1e390_JaffaCakes118

Files

85170155470cfac71553ba6bd4d1e390_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.itext
Size: 3KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 650.0MB

.nvlgsh
Size: 967KB - Virtual size: 968KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ