20c5de1a9bce1262397b00868d2b0658_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20c5de1a9bce1262397b00868d2b0658_JaffaCakes118
Size

34KB
MD5

20c5de1a9bce1262397b00868d2b0658
SHA1

ecb934b48c6eff0e87d6b02ad6b5e3ed03ede74f
SHA256

d708888050bed97647d9b43eb7c549ac4321cb598cb7e2f4c0be0dac92983a42
SHA512

9463a98e6dd4a3de05fcafc66512fce023fe0fbeeac83a9bdec3a178ab357f7778ee7e3f9ef15c72e637549a5545cc380ffc32c9e45477a388637b6de90f7a1d
SSDEEP

768:K9g6xiNKiV6Cwc8SdLCdNOX0jivpmXNaoTw:KvYKidw9SdLCLOKspmUos

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20c5de1a9bce1262397b00868d2b0658_JaffaCakes118

Files

20c5de1a9bce1262397b00868d2b0658_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yC
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE