b13415ed2ab146ca783bde4fba03c672_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b13415ed2ab146ca783bde4fba03c672_JaffaCakes118
Size

753KB
MD5

b13415ed2ab146ca783bde4fba03c672
SHA1

55ed736a15be1e44154b7c179505547ddb14e082
SHA256

c5917abbe074e621a3e15c3e8234a1acd55e5f34d0db9b86f1fd7d7243789506
SHA512

63122997c565622e43869a08b5598e9d915687ea9af35c372f2866bfbdf17c71e26eedde8eaa88a1c73014d7b26b99873ad707573870060c0b9fe6daf7876995
SSDEEP

12288:djyjvn3JFW4epC88KV1rK9zvD867p6QmkGWSlvE87AxqN9uKvR:dj63JCC88N9z7TpaLtAxO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b13415ed2ab146ca783bde4fba03c672_JaffaCakes118

Files

b13415ed2ab146ca783bde4fba03c672_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 508KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ