4614b46f40d1f8a483b8ff78e099f3c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4614b46f40d1f8a483b8ff78e099f3c9_JaffaCakes118
Size

116KB
MD5

4614b46f40d1f8a483b8ff78e099f3c9
SHA1

6a5cb1bd4183bb43c2bf0191e233a2d0841f28ef
SHA256

597da1cb41619d6ad02530d553cd490d0ce75968282dab06268390fde4b73472
SHA512

5ab502427f2e04248b3f9ef05c2d61ff66f2ca541a02c2968cc193d0e8e5f99ca43017381efb7c1ab13351660043c3d59251e555d7260085ac25d65a431262d0
SSDEEP

1536:77bPhPbP00rHR0BK7LQSdUCOSvBqnVSzl/THCSeLwP:fbPFbPrrxVvBqVGNCSU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4614b46f40d1f8a483b8ff78e099f3c9_JaffaCakes118

Files

4614b46f40d1f8a483b8ff78e099f3c9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4dce087041d803114bf5927f8ede64cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
GetFileAttributesA
GetLastError
ReadFile
Sleep
WriteFile
GetFileSizeEx

Exports

Exports

principal

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ