710cc038f4ada9f365a0775d612a4578_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

710cc038f4ada9f365a0775d612a4578_JaffaCakes118
Size

727KB
MD5

710cc038f4ada9f365a0775d612a4578
SHA1

64b291e4788000a2e5605da1aeb52229c7a1bfa0
SHA256

6bf22c5d53e758f1870871226d8371685a33912a4994acc8e08722f38cbda42d
SHA512

0b868f9bac7edae8cfdbb4d637f8d31eb0ca1a7021d93f965b79008f468c89244ccb84ebfca582c5eebfe553b3d8ece0fbe5351ebe2f74ee8d5142671e6d5471
SSDEEP

12288:5VV/nOPGCo70joRQYMOJHbsHm1Wjozf83qU:7xlCo70jCWO9Cm1Wjoz0a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
710cc038f4ada9f365a0775d612a4578_JaffaCakes118

Files

710cc038f4ada9f365a0775d612a4578_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 622KB - Virtual size: 621KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ