a49013edb4f38016bc45f11ab1f96dc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a49013edb4f38016bc45f11ab1f96dc6_JaffaCakes118
Size

3.1MB
MD5

a49013edb4f38016bc45f11ab1f96dc6
SHA1

2121d4f2538ee981d3e564616afc0aaa4e82072d
SHA256

ea679b2c0917ab70387c06b3b82da929cb1cefd91c5bc0da0f58b32fb113d6f0
SHA512

6e27ee353af51d74e98a7a01c2dc99f0935927f1655cb289bb8b633f14d505e55e4c1723fce0b7ca9ca26a22ca8dcffba4d6cc8f46af4277fa265bbaba0680f5
SSDEEP

49152:bpDV9aQoVEZok3JMFbYknQ9UtVbdDhduwBDBZZS3iMZFYqSde7x:FTGA8nnQOl5LZSbVt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a49013edb4f38016bc45f11ab1f96dc6_JaffaCakes118

Files

a49013edb4f38016bc45f11ab1f96dc6_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 273B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ