693d7b482d2f549b7974ce30b4433c8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

693d7b482d2f549b7974ce30b4433c8e_JaffaCakes118
Size

672KB
MD5

693d7b482d2f549b7974ce30b4433c8e
SHA1

75330d4cf5100de7f67d2ac0c977f0edb59b593f
SHA256

c37f34bbf773996972045855bb9fe25a7bc5b37d95a82c48b13e168bab731b70
SHA512

0baf1204cc4540d0db87540bc14deaef2461fb578c67fea759f965feb88f5f784a6b9dbd28e2ebeca07192f642c306827f7fc338a7725eed850df9f0a8c29add
SSDEEP

12288:gOCJxJZtr9/MEOsvED+6RNeZ6RBnuAsN/a8KsrUTCBVlgPc+krWLt:g5xf1FOssKjZ+nL8xzUOBac+k6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
693d7b482d2f549b7974ce30b4433c8e_JaffaCakes118

Files

693d7b482d2f549b7974ce30b4433c8e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DoeServices

Sections

CODE
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ