9b70a374cd3249c04e3f9d0c1767922d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b70a374cd3249c04e3f9d0c1767922d_JaffaCakes118
Size

76KB
MD5

9b70a374cd3249c04e3f9d0c1767922d
SHA1

5998cc177913ae18476cf7f4f2b3faa4363ad665
SHA256

e90007277fa097f833ec0d639876918f0dc0b652273566bf22aab148dbad4165
SHA512

d7428ae83cce9d4971b77b66fd3440643e88852464e8a0e30e2688d3361d254b43b6d470b3ba4b80ccaa978139adb3851ff279f073ff43ea14d3a78983cc7257
SSDEEP

1536:kLUhElBCHkdp3epom78gtx2sAb69aDQg11K041JtL7wU:wcAQi3epom7h2LUaDQWK02X7N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b70a374cd3249c04e3f9d0c1767922d_JaffaCakes118

Files

9b70a374cd3249c04e3f9d0c1767922d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ