0c83515481222659ed58102393201935_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c83515481222659ed58102393201935_JaffaCakes118
Size

429KB
MD5

0c83515481222659ed58102393201935
SHA1

46f57a8e5383bb846394a998336b6a3f4bd1bf5f
SHA256

2077a7e35932ca23f0a7be6b58eeacbecf04a4c6f98cf8d55fd903f91b0d6a6f
SHA512

4aec3f6adafcbbac9b98fc7b7c5bf49548bac53dd90002d278277612eb3d0352210e9ccaec0d5692e808ebe3249cb4200d83af496e3bfe98e3b37b27e6adf82e
SSDEEP

6144:IdBtM/Lc3EM30a9zSbJrsxV3b/cYNYv5tPqeEDBP0L6aAzZ88VmyNgSd5v/zky7S:utM/LsESz8MiHEFPW6zhNgsv/zZuD9d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c83515481222659ed58102393201935_JaffaCakes118

Files

0c83515481222659ed58102393201935_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ