700a3c122ebbdac2a438d4a5fa064c35_JaffaCakes118 | Triage

Sharing

General

Target

700a3c122ebbdac2a438d4a5fa064c35_JaffaCakes118
Size

491KB
MD5

700a3c122ebbdac2a438d4a5fa064c35
SHA1

16b36fe578a7e4f293f22533a7e78d7f4b685b2e
SHA256

b50f5e3a7e79be15894e4e36bf1d8f00a2e0f3912706e88eb194be4d3ca44fa6
SHA512

f9f0790c3032730cb0a10de8f9e835e865585c2128e1b5b67374a656dbd514b730859da0089bff02f65b3394a05df82b1dfd5e6e4929723fff6e618bc59e746a
SSDEEP

12288:wdjg+pbHgtDzKoVr8hVeWY4D3IvKwwfaIMJI+zzouIf:wxvzQle3IRIikuc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
700a3c122ebbdac2a438d4a5fa064c35_JaffaCakes118

Files

700a3c122ebbdac2a438d4a5fa064c35_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 482KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ