20ed064a571fc21824bd78399cc759b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20ed064a571fc21824bd78399cc759b0_JaffaCakes118
Size

108KB
MD5

20ed064a571fc21824bd78399cc759b0
SHA1

a7ff1dc80647754741f7dc39adc08e3e0ce63d63
SHA256

42dcd941811b3dc7ef8a82129ea3740d76d0ea145d2ca1f9a7524058fd4a311a
SHA512

a479226c5ed23b50568c9b9b12a9417dade45e0e69d712fc6684cbf8913d9748bf1a96577ae9191a5d841a2e91fe57c3894cce56bd5133c750d0897d85b79a7d
SSDEEP

1536:D1qJLKjtICwU1AhPkHp1/YyFeDzIk9NrNDJ:YLu6Ct1/HpWyFefIWnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20ed064a571fc21824bd78399cc759b0_JaffaCakes118

Files

20ed064a571fc21824bd78399cc759b0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 588B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 8B - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ