da5a1f5923f5f64b51850f6d003c46f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da5a1f5923f5f64b51850f6d003c46f6_JaffaCakes118
Size

939KB
MD5

da5a1f5923f5f64b51850f6d003c46f6
SHA1

6b50a1751e25977cb421df0b4427399ab8f15a91
SHA256

2289a1df8e38cf41bbf04a29b23bb6abd025334f73954da0363964f8acb2cc99
SHA512

130cf4ffa016cc9e66b9be5a31a121b2bea2d0a442dd462f3d7fa2f4fe1cdffcb7f84fae1d9d220ca067a5d4a82e91f96ade8249b1489a23bbb758ea9b0abb76
SSDEEP

12288:yx4apS712qUhM37YwgidNRLbEqyFUItJFgpHTD0N7K2SpfcruoFA7evt1bnrLtuq:D8eyk7RFRLQ7FQXGMguoFA7YHrLtu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da5a1f5923f5f64b51850f6d003c46f6_JaffaCakes118

Files

da5a1f5923f5f64b51850f6d003c46f6_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InitDll
UserDataExportable
UserDataImportable

Sections

CODE
Size: 811KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ