4ba9c4555d40d4542d027cac8df9cf92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ba9c4555d40d4542d027cac8df9cf92_JaffaCakes118
Size

248KB
MD5

4ba9c4555d40d4542d027cac8df9cf92
SHA1

8bf3c6157464267c95966f1101d0a839156baa96
SHA256

82926b7440e226297c506fb92196b7d34c0d0dbca689be14aa38101fe60ae9c1
SHA512

74bc86120fd2536f75c2b17838f2276f1e3e95a05ff77533a9ddd7de884cdb0b40df5731a5e8e7ffb0a830c4f05867c6d3fb85bb819d4681f265780c975d7be9
SSDEEP

3072:n8EgV9RCAvuQAZLLfkQxyhLAiVNl6AIn/FHVpy8gxtv0NNXGU26Wlx568zX:roAsT6AId1p2ON

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ba9c4555d40d4542d027cac8df9cf92_JaffaCakes118

Files

4ba9c4555d40d4542d027cac8df9cf92_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdbid
Size: 4KB - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ