c97bf1cfc2a0ae6945419ab430004038_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c97bf1cfc2a0ae6945419ab430004038_JaffaCakes118
Size

428KB
MD5

c97bf1cfc2a0ae6945419ab430004038
SHA1

20799be0c47249df3d832608b10f35d5449f2bb5
SHA256

bcab8e1826fc0698e2d7875c6ee5eb11f9ccb7c06ad9065c8bf7c21bcc851262
SHA512

3b2db565b7fca588654fd2e814d8f24357d5615cba565eff28b5576ede4b940146916ecab33cc5c202a882c506d459f4bb65930809fd4f302a79f9ff21f69539
SSDEEP

6144:zzD4ITGr1xl7D+JpzH/qtaLI7lZh/9mLYvxmcpQnQ4yyHH35YxOuOST8eiKP7ygC:j4ITml74pzfqt/NuQcHHqcuVli27s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c97bf1cfc2a0ae6945419ab430004038_JaffaCakes118

Files

c97bf1cfc2a0ae6945419ab430004038_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ