4e5174fae6ddbd6257ae15436770dcf2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e5174fae6ddbd6257ae15436770dcf2_JaffaCakes118
Size

991KB
MD5

4e5174fae6ddbd6257ae15436770dcf2
SHA1

9cff4e4075ab6ff6f1b4f55a258f460a8053a9b7
SHA256

645bb136b93e8dba98d3e6a623def6ced10c14a296a5560cd235f914f7f318cf
SHA512

bb9a9c4ca8ec0469101ab65e8895cf58b887d164dd25fa36672f95ee073b844b5bdf61ed2b2a627a0a6eb4b6caa6ce73cb5399ed3309ce73132679513f6393e1
SSDEEP

24576:1Z+v2XVHhK8tK77eFMQk+1qfa2fzfMend:mv2XVHh27eFMQa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e5174fae6ddbd6257ae15436770dcf2_JaffaCakes118

Files

4e5174fae6ddbd6257ae15436770dcf2_JaffaCakes118
.dll windows:4 windows x64 arch:x64

f2182063a53acced8ecb799469fe064a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mfc42

ord1484
ord355
ord1469
ord6890
ord1562

msvcrt

__CppXcptFilter
_initterm
__C_specific_handler
malloc
free

Sections

.text
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 983KB - Virtual size: 983KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ