398f6f5bf7804d3c0ad19029e9c7b670_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

398f6f5bf7804d3c0ad19029e9c7b670_JaffaCakes118
Size

78KB
MD5

398f6f5bf7804d3c0ad19029e9c7b670
SHA1

9cf8079c47d64ae6c94cd7d8534438c289f07c50
SHA256

c333dbdefefbf11f172848953ee100b651d3ce6474efc91e62025c8db447f12d
SHA512

450cfd32f5b1a98df8eb882e5d687a3d42649c95c60a3d54f7baa619b16bae2a22df51bfd7be9d51c01772a727ef64d5d2891d934a334b6e78f32839ce329d7e
SSDEEP

1536:v6q79WeUhdBfk6vrEUUX3zDbFnKRaZ6qDrTxhtxt1touymYn5Sy4CnI7:RSL1DankRjqVb5ymY5Sy4Cg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
398f6f5bf7804d3c0ad19029e9c7b670_JaffaCakes118

Files

398f6f5bf7804d3c0ad19029e9c7b670_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ