9434c49146a255df6aa69f569949b7dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9434c49146a255df6aa69f569949b7dd_JaffaCakes118
Size

264KB
MD5

9434c49146a255df6aa69f569949b7dd
SHA1

80a6d2eda83242d4eb698bcf653d7cb54ff7c066
SHA256

70e06f5663a69daaf747217f3d93cd56a875bca3aad691407ab0efd9d9de6b0b
SHA512

4fecb087108a882bccecdcc2faba18da3f4870473a5202e9772fae151f72e73b0fa37208619c0b47431de15a61f11c37d44c73770596f7d7d179663c98facb0f
SSDEEP

768:XozphAWo0wQpSLtARYOEIknDYgHPy3hBDIS4dzl/pdK1Dcwk8h:4zphASpSLtQYOFkDYuyvDISKBdsa0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9434c49146a255df6aa69f569949b7dd_JaffaCakes118

Files

9434c49146a255df6aa69f569949b7dd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
X5pVSzSF
dP5yRxpb

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ