c20c23adb2c925d47b1939f85d514f74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c20c23adb2c925d47b1939f85d514f74_JaffaCakes118
Size

442KB
MD5

c20c23adb2c925d47b1939f85d514f74
SHA1

e5bd543d4bd787448d740a75fa85eb2b86e70270
SHA256

aeadf97a7977d72c152167bbc8bd06f577d6ff5000e1611d4109a2f351a1824c
SHA512

098afeaa672da46f0091fe30e9ecbbe8030673f18d9f9fd30694a582d4851c7b89e53d2a58dc1b658d530bb9af62db2d5547cc9d0e1fcf4821921dadffa27c4e
SSDEEP

12288:H7SfpnxLbhdq+APaRI/813IT1rVei7O9jtphNQDbt1iXDN:H7ExLbe3eIE1YJVx7O9jrYtATN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OUTSTANDING INVOICE_JUNE2020.exe

Files

c20c23adb2c925d47b1939f85d514f74_JaffaCakes118
.zip
OUTSTANDING INVOICE_JUNE2020.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 580KB - Virtual size: 578KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ