f01165507730513fd1f372109757503f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f01165507730513fd1f372109757503f_JaffaCakes118
Size

381KB
MD5

f01165507730513fd1f372109757503f
SHA1

d5b96f2657d6fec06143376d1ce618785adb459c
SHA256

d044177ee2c4908c64ea373969c9bf6936e1130d6036f2f47142801a523a04f2
SHA512

df2326575f068bdf81e9626e7cb4c61d5145ad0025ca97dc93eb3ab6dacd104afb87b6bb49ceaed98514c6160f024a1fb383a118d7be25cc722f0d18ac50844f
SSDEEP

6144:+/PJbR7VMdFuOg8hdXn+EAdYQF74TdQV1HSHT2/pQp/h6r5XcHD:IH7bYn+EkZadQ7HY2BQp/h6r5sHD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f01165507730513fd1f372109757503f_JaffaCakes118

Files

f01165507730513fd1f372109757503f_JaffaCakes118
.exe .vbs windows:5 windows x86 arch:x86 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE