c20c96cec7791d6876d686a15f352323_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c20c96cec7791d6876d686a15f352323_JaffaCakes118
Size

71KB
MD5

c20c96cec7791d6876d686a15f352323
SHA1

15dadefcff20c0d77f6a7ae39692ed1d452df66d
SHA256

c155a8e046d25f60893fa803afa43286d80abd2955bfc889008fd21a069bb3ab
SHA512

d57db0f6fee71b8ca2476ef0fce5e6d95b93c3e48cd7b93559774feca9edbdbcb79472d1e0ad5a0a15d8528be28f3a16c64428263b0dcaa99790c446c9f9fde6
SSDEEP

768:b4evf/ija+1I8Jc0wWaQCJJw3qwAbIopTrAYJi6WBLZNLVfto7M094b99BW40u2B:b4eQc5xrw3qt/2Ii6WDrm9WX0uhxABl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c20c96cec7791d6876d686a15f352323_JaffaCakes118

Files

c20c96cec7791d6876d686a15f352323_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ