020d70fa1cfaf1d8a0dd430016531357_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

020d70fa1cfaf1d8a0dd430016531357_JaffaCakes118
Size

220KB
MD5

020d70fa1cfaf1d8a0dd430016531357
SHA1

75f9aa21aa2cdd8b7129dbc2f2a5ed67fddf2f2a
SHA256

bba73829ede9d3723d3d4ddc45db18e31acf1899fc34acc7db14b55cbc75e687
SHA512

c18a9dae1e2f85b2bf1bfcc8ff61b64cff6c00ba91e0c2d1eaebf8b3e231411f9950c5c0a6025b549b4d0851e61826e2098f521ce7010f739f0e8064f483a123
SSDEEP

3072:UzcCGE/QNZv3KgTgKRsUTCho4PIg9gs02ppItY39/7Srh8cWNCqpl1yMnoQAiXtC:UzX/+ZiaTCXQiz0tS9/7SrP4CWiidC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
020d70fa1cfaf1d8a0dd430016531357_JaffaCakes118

Files

020d70fa1cfaf1d8a0dd430016531357_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rel1c
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ