d137ba739a5690212cc2b3709a6bd6d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d137ba739a5690212cc2b3709a6bd6d7_JaffaCakes118
Size

162KB
MD5

d137ba739a5690212cc2b3709a6bd6d7
SHA1

f78d795e26f338037695729f0d93272aab3e7730
SHA256

475a8d66c6d0b747e1ef6367a82de1ca83439c56eb174e83910beebdfd276786
SHA512

8a3529e26efe6d7e8a37efefc2ea74c09cae3ba568bb2da04f56ca45c159ce9f9d1ab49f4c19046c5086b0e19e11fc8969f286f5cc23b4bdd6caefa3c8721596
SSDEEP

3072:nEZB94/pzXckR9TsCz8fjfkjJmh02zW7GDkHxSmwA4:nGABzMg9ngQ1mh07ywS7A4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d137ba739a5690212cc2b3709a6bd6d7_JaffaCakes118

Files

d137ba739a5690212cc2b3709a6bd6d7_JaffaCakes118
.dll .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ