df60d457f7fabfa65e4c778d8d2b0651_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df60d457f7fabfa65e4c778d8d2b0651_JaffaCakes118
Size

2.1MB
MD5

df60d457f7fabfa65e4c778d8d2b0651
SHA1

fefcb2748fba16fac797f386affa7015c27c40f3
SHA256

b66105ae3a71845e5e2fca97fe66a6e19b66f0a5bb57864fd93c5329e9a3feba
SHA512

99bfba4e67f06c7cbac250094c6d667de44b092344985f2667075cf6e6656c00414ce90252b6ea3df0f048fc7fa115e9ed8584295e967d3a2a0439e08c20394f
SSDEEP

49152:qWopS24JuxD53sjg9VxvBnxOJI7zWYNcm+MlrMI/LC56:JopS28k9hnxOe+KfMI/LC56

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df60d457f7fabfa65e4c778d8d2b0651_JaffaCakes118

Files

df60d457f7fabfa65e4c778d8d2b0651_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ