004b42619f03f041bb645d629723165e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

004b42619f03f041bb645d629723165e_JaffaCakes118
Size

93KB
MD5

004b42619f03f041bb645d629723165e
SHA1

a31b0073da876a22052317ff7962780929a420b3
SHA256

594670550f6efcec21c245894cd472ebbc792aefe67ab00b27906ba174c6e132
SHA512

869cc9d0ea798d424f5e1a3337e3ee8f12cb747cae2b8ebb415341e3146ffa8100b3129a3d7dd8bc0ce4acf24ea8ce320cb0f2198fe7e54bb87961f828d7af44
SSDEEP

1536:/t/dIcgCvI+KOocuI/Gu1bDxm4sg4uotPOhr/nPLDog4oYxOUyovny2:V/dAOxaqGu1bGRuoEDogExOUyovny2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
004b42619f03f041bb645d629723165e_JaffaCakes118

Files

004b42619f03f041bb645d629723165e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.guoc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.guocy
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.guoc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

guocy
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.guocy
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ