70b598e44147b2a90d3682474a62e76a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70b598e44147b2a90d3682474a62e76a_JaffaCakes118
Size

5KB
MD5

70b598e44147b2a90d3682474a62e76a
SHA1

8334d8c927725b9eaf25f2a4d8f0d1f790559dc1
SHA256

f309e6fcab01c080fb726d7f25c42ddb0c27e04ea041d9d21ae8eb4588df9335
SHA512

a324fcd6d529bc82656e0bd00ab6d8aa870fcbe508ea6c679dae58b7546b4bfa2dc669bb734d403a0c80bcc2d5189edca06e829f565758c7dc15b20dd7e8c587
SSDEEP

96:tmnIFidYvszVK1UzE2qBTyrHJL6fV4cBBP/WbeNFU0VWARZq4VUeuaO4UVJEH:tOKh+Wyu4ce2U0QyXGTu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70b598e44147b2a90d3682474a62e76a_JaffaCakes118

Files

70b598e44147b2a90d3682474a62e76a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ