406826116557c416d24673ee07517eec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

406826116557c416d24673ee07517eec_JaffaCakes118
Size

585KB
MD5

406826116557c416d24673ee07517eec
SHA1

7443ec26fadc973330a9588b7a5383b974af0dd9
SHA256

dbf8dfeb9c00c74d31880295cb7ccf9b06bf8c5c3cfa860947f0a250ca49fe5a
SHA512

1776e67c13243a97dc2356a0748253b2a0ad43833892c4c020a2cc5ef5f99f981d27a5c6e863638ca9a650a9baa7f7ca2275be85512461fb4c975130cb9d59ed
SSDEEP

12288:KpohuRx8t2rTiDllrYhTxFHO+4YiWw+4X2rLmZjuzn:KzgtYODllmtJO+4YiWw+4XFjuzn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
406826116557c416d24673ee07517eec_JaffaCakes118

Files

406826116557c416d24673ee07517eec_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GraficoAdd
GraficoIniciar
GraficoSave
GraficoTamanho
GraficoTitulo
ShellRun

Sections

CODE
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ