70607b0b1062bd5b0b4b63962ad2a109_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70607b0b1062bd5b0b4b63962ad2a109_JaffaCakes118
Size

1.9MB
MD5

70607b0b1062bd5b0b4b63962ad2a109
SHA1

06e6e8466e15f7534dea3f01a964d6a0305bc206
SHA256

57616f2264279e26f02a035c818665c8a7be8b4a2039239207595c3c8be0e7b3
SHA512

98ff381ea459bd359ffbc1fa9dff01a1d0e76c0fd43d9a3c0320c0bf348a084612ccde0535bd30db7a2574d1f6c5f13136c5c367e09fb912d0821b69e3ae09c1
SSDEEP

24576:M1+B3Re/xKW5Ap+mXskKaNoez6af+zgpYLRWYFw/NUHy/uCGPxaIk/IAq2qJHfbx:M1OipkKaNZ6TzgpYt81M7tHrTPbGZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70607b0b1062bd5b0b4b63962ad2a109_JaffaCakes118

Files

70607b0b1062bd5b0b4b63962ad2a109_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

uioegegwhugwehogwewgehwgewgeiwegwegw

Sections

CODE
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ