f20dd47996ec12690667b898afc65745_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f20dd47996ec12690667b898afc65745_JaffaCakes118
Size

1.4MB
MD5

f20dd47996ec12690667b898afc65745
SHA1

0c375a24d014dbc54cf4bb6537a1a480ba29b4c7
SHA256

35b8bd1cc05b9303ade20922c2ca46a11b8993b053631e22480fb014c3f4ab39
SHA512

58cd7f8cd8ed280b21e68086ef341b3585df8f54bd2d383af26f46ee861ff2bd934e5f895182e03bfb8a4de885f5bfd7a2c39ab6f05a6e6b9760fe6b33fc3cff
SSDEEP

24576:sNh80hMGSIyGXjs/eom69NvtW0xgIzLjHYJfoMPgSBqjF6dN3Dzgi+WhZW730SsV:gPhMldGXgm69eIgIfg4SBiFmPthhZE30

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f20dd47996ec12690667b898afc65745_JaffaCakes118

Files

f20dd47996ec12690667b898afc65745_JaffaCakes118
.exe windows:5 windows x86 arch:x86

46c9bb276aee4611c6fee198965128fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

wsock32 kernel32

closesocket ��

Sections

CODE
Size: 65KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ