4708a1a3409e6199e77f7834cca3ae45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4708a1a3409e6199e77f7834cca3ae45_JaffaCakes118
Size

31KB
MD5

4708a1a3409e6199e77f7834cca3ae45
SHA1

ed293fa3b08a90f51845473c5cd9c15f5b40b5f9
SHA256

0cfe66e77eb1888b22517a3f898561dc29cdec43e5fb8ae38a9864efd936892e
SHA512

b109c3ea02d6caf47a3e9ed3309a7b45d540769186c854a722719b644143d3c082e792daf2be40cdc62a2393f03ebe19c55931b3008ae32ecac42551a17060de
SSDEEP

768:BUXF1WLtJOwcQm+ezi8EYwqzBM4Q921MHtGSLbDhl52DU2Md:BUOLthm+eREQIV3Dj52DU2M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4708a1a3409e6199e77f7834cca3ae45_JaffaCakes118

Files

4708a1a3409e6199e77f7834cca3ae45_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.VisualStudio.VSHelp80.ni.pdb

Sections

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ