8de68417b889762d12a1889d2f95f953_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8de68417b889762d12a1889d2f95f953_JaffaCakes118
Size

72KB
MD5

8de68417b889762d12a1889d2f95f953
SHA1

0161983f614a0cad5b381b15477dce0d91360919
SHA256

c141ec39ce288796f4c239a12fcc761be93351e936360da9f0a1a53c805e62fc
SHA512

c12dabe7c9ec85b81d72d475a1318ecc7f8ff1189c5ad2c6e6f242e8432327d358d2a952c74350f51a4518d1a922fe9bfd1b4ba34ce7d01b40c4ad7a1b6eaf07
SSDEEP

1536:sDyqYpQEq/vh2lYV4UFiIBLKqYPQHDlQSfz9JNOrB47ckCcUwf:DpJq3hIOiIgP+xQSfz9ekdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8de68417b889762d12a1889d2f95f953_JaffaCakes118

Files

8de68417b889762d12a1889d2f95f953_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ