28acd0ed028e6a6fc1e01aeb34da02e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28acd0ed028e6a6fc1e01aeb34da02e9_JaffaCakes118
Size

42KB
MD5

28acd0ed028e6a6fc1e01aeb34da02e9
SHA1

8b76771cd80f462f266e869ebf8c14a89b0adf9d
SHA256

e5cdb659558ae710d22e2b1c152c861cc75069d683b0e94e3f44cc7f7c4bd37f
SHA512

24abcb406384536e861a1733f717d777a93fda6a50479eab0dc9cefe6399618da2de9aa522ac66182b21815acdb816c3cdcc7c4a92fb86755e5125acb48878b5
SSDEEP

768:ZZp+Unxp9FYwvQOJO5XZXiOWHIULrDV0WB7tTCB0jY8lV:ThJ+sQv5XRiOWdL/V0GVCMV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28acd0ed028e6a6fc1e01aeb34da02e9_JaffaCakes118

Files

28acd0ed028e6a6fc1e01aeb34da02e9_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ