c20d8bac466aa0595a5ac879f53d6001_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c20d8bac466aa0595a5ac879f53d6001_JaffaCakes118
Size

146KB
MD5

c20d8bac466aa0595a5ac879f53d6001
SHA1

25670075bce3b0af1855d2c8aa83616b4f90ae18
SHA256

95f6ff13219eea485779ae70d8e9845646b5e53b31e24541ddc7a1c31a2a56ee
SHA512

4aac9d78677d24e4596d6b8e2d81311e42ebbb9f3979decdbd4a6c7f5daf45f30873cbb9a162c6a886e6bf31b6d778071243ccc8b6ffe50afdf6417eb9ba6ce3
SSDEEP

3072:JuakM/eA8nC50rkL9M2XNc2tl1QuYtJMX8ZhgA:JbEC50rkLKaNh1X8Zhg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c20d8bac466aa0595a5ac879f53d6001_JaffaCakes118

Files

c20d8bac466aa0595a5ac879f53d6001_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ