cfc4c624749be2cb790c63a28dbd52fb_JaffaCakes118 | Triage

Sharing

General

Target

cfc4c624749be2cb790c63a28dbd52fb_JaffaCakes118
Size

159KB
MD5

cfc4c624749be2cb790c63a28dbd52fb
SHA1

69e4a58a024b409c76417830c8e42943677922f7
SHA256

26a7ae18f4c71bfc46d533a0254b5cadbd26b7c9522866c69a5b6ae5dcff47de
SHA512

9ee171dcbda44b75b605bfb7d4ba063fb5496e63e66aa3ed8ebcc272690425f7a1c41e1c3645381fb5fab34a662d90cf5f707c8392cca5de2f7cf06cb0dc0f67
SSDEEP

3072:fEZB94/pzXckR9TsCz8fjfkjJmh02zW7GDkHxSmwAt:fGABzMg9ngQ1mh07ywS7At

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfc4c624749be2cb790c63a28dbd52fb_JaffaCakes118

Files

cfc4c624749be2cb790c63a28dbd52fb_JaffaCakes118
.dll .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ