70286d25cc11c95736a5169463d7c5f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70286d25cc11c95736a5169463d7c5f3_JaffaCakes118
Size

157KB
MD5

70286d25cc11c95736a5169463d7c5f3
SHA1

2784719be16b0b826b3102075c5161fac1158fcc
SHA256

3c44d26aead45af878c499f3399053d23cd6fdb1c0b2389b4cb0fb81a83e8a89
SHA512

2cf32b007e41b8da10206e406d313ba4a901a7c45287c22534deafe4b6e51f30a6a6ee842e2a370cf65e1b61d404ced598e6c3ccfcbecbbf50171903ded14c64
SSDEEP

3072:gkGx2VXXKB2cQVJpxFE4ZmVETBerqhgu8G5OsElU1lF7axJKMhC:j7nKgfFE4Reu8sCU1CTKx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70286d25cc11c95736a5169463d7c5f3_JaffaCakes118

Files

70286d25cc11c95736a5169463d7c5f3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

doset
helpme

Sections

CODE
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ