b6ae3d0c569d4511e69c6a66930bec52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6ae3d0c569d4511e69c6a66930bec52_JaffaCakes118
Size

62KB
MD5

b6ae3d0c569d4511e69c6a66930bec52
SHA1

46fee996387df51b98592af71d96a7cf6a0403e9
SHA256

86afcdb5e0b71806e0f7b272f0e6297d34e0504a4ae0888313aa3b0d7936ce92
SHA512

2defbedb44d7dd39d3e995ba91da99c31b358750b503df2cf2ba8a9832f84925a7299719ae1757deef6f0021b1309a5591339e4851f519821c5ddeca0ab5b016
SSDEEP

1536:ldKPs/4ZU/HaeVVhVw+oXZ3oW1k7F3wKP:m0/4ZUCroW1k5X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6ae3d0c569d4511e69c6a66930bec52_JaffaCakes118

Files

b6ae3d0c569d4511e69c6a66930bec52_JaffaCakes118
.dll .js windows:6 windows x86 arch:x86 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

cnbi470p.pdb

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ