20fb6b5e47e1884fed16e87b9a8563d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20fb6b5e47e1884fed16e87b9a8563d0_JaffaCakes118
Size

553KB
MD5

20fb6b5e47e1884fed16e87b9a8563d0
SHA1

b4805770bd0469fc146d4e87c857d29d016017db
SHA256

a66489b44697045435ab055e65a5074ceb10596c8b113d4de8fbea00ef8ab5d4
SHA512

35a8a7e4077b3f37467ab926172aad28fd811fd5014cebf116d66b5331bed944dc40f013163684735899a205eb5cf08c6cf89d5fa2c05954390524dd576e86f8
SSDEEP

12288:giT3cLJyXMDiMjqHyLjmDeO9+GHisOyBhds:bbuyXMDiMO40eJ1sO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20fb6b5e47e1884fed16e87b9a8563d0_JaffaCakes118

Files

20fb6b5e47e1884fed16e87b9a8563d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 463KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ