4ec78bf9c47f08407d16a8c09ccb5bb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ec78bf9c47f08407d16a8c09ccb5bb2_JaffaCakes118
Size

890KB
MD5

4ec78bf9c47f08407d16a8c09ccb5bb2
SHA1

d688ff8298ab95a406ef02c72b3bd5cbb4c38f5b
SHA256

a753b1b77617592c735ae0442b296a76cf82486007e8ab1c6d1b148b2662ae71
SHA512

d81dac5cd0a69f8c9756e189ff216e2192dd6fe0eb6f573d0d655ac3deb00f3e4954a243436f7d346b7d8f549ed172711833a9362aed30ee536b948a9e24bdd6
SSDEEP

6144:4mSnFNJlRIKxiRowp577JDKi577IvQzRLThuEmjSL7kfzFMbZXAGT9vyUYHnKBIT:InvXm577tV577IEhrm07eFMqz9fq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ec78bf9c47f08407d16a8c09ccb5bb2_JaffaCakes118

Files

4ec78bf9c47f08407d16a8c09ccb5bb2_JaffaCakes118
.dll windows:4 windows x64 arch:x64

f2182063a53acced8ecb799469fe064a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mfc42

ord1484
ord355
ord1469
ord6890
ord1562

msvcrt

__CppXcptFilter
_initterm
__C_specific_handler
malloc
free

Sections

.text
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 882KB - Virtual size: 882KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ