20f24b95d6caff6509aa3b82d304f742_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20f24b95d6caff6509aa3b82d304f742_JaffaCakes118
Size

26KB
MD5

20f24b95d6caff6509aa3b82d304f742
SHA1

35f2727299161e83489deb5f50db5a7ef9f435ff
SHA256

777f2bfd49e04d008a2eca22206f2512b31cf69e3b5089fc7a8bdb50bec1a254
SHA512

3e8742d5973727d82a3e0f5d8449c3c990aee4b85f2f775ee75159e48c71284856d67c46baa7665f513eb0655381bb705282c7b10ea9b71c67e5e55f1e32bc62
SSDEEP

768:G9Ck+bz/AE38jVG8vvCE/ijIK9p07xVTiV+YId:G9CkTE38jxvaEIJoJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20f24b95d6caff6509aa3b82d304f742_JaffaCakes118

Files

20f24b95d6caff6509aa3b82d304f742_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0xfx0
Size: 237B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ