beed05f5e1b3c7dd9bae23ee845131c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

beed05f5e1b3c7dd9bae23ee845131c3_JaffaCakes118
Size

18KB
MD5

beed05f5e1b3c7dd9bae23ee845131c3
SHA1

1951ce105e5559b50a991e9f8f5da52a36029ba1
SHA256

00fc9dfd389c049d7e4a592e1d76b6194a65861cee3cdce835655efe97f86d3f
SHA512

a86bf36ec42bfe379c476f4834557e67d7c6e25c884058cfea5550728dee98509f4f82ea46c8f7b5af02d1594f50f58b6d98bc46e969977247a90264a4ef2e3d
SSDEEP

192:D29hn+kBSSicYHnEtSY+tgaWhe4YqOd4pbZKkclfk8+Bx+97xDem7hsbBJp:D5MWEtSntXWA4rHpdKY8+iJP7hop

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
beed05f5e1b3c7dd9bae23ee845131c3_JaffaCakes118

Files

beed05f5e1b3c7dd9bae23ee845131c3_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE