4967a971f16fdae1b8fbfe74621162da_JaffaCakes118 | Triage

Sharing

General

Target

4967a971f16fdae1b8fbfe74621162da_JaffaCakes118
Size

167KB
MD5

4967a971f16fdae1b8fbfe74621162da
SHA1

49b0766d33dd4a4df2ca0deb8307bc85537dd1bf
SHA256

6ca1048cd5c9171fdf470d5caddea47d00e31640fe2bc25406f80e8503da8d26
SHA512

3a8c03891cf89b42316109814a7ed931709eb441b24b7a5af632acad816f7874c503714500b2a74bd319a30b6c8351a886dd39b8730ed8c19ac8b2618c2ffadc
SSDEEP

3072:pcPWJ8t6fkk+t1Mp64c8NzTfEM0b3IHTQirbgjWZ:p2s8k+t1Y64c85fEl3IzzrEyZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4967a971f16fdae1b8fbfe74621162da_JaffaCakes118

Files

4967a971f16fdae1b8fbfe74621162da_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Documents and Settings\crenoud\Desktop\SourceMTA\VOMBA\code\projets\contextuel_popper\exe\src\URLComponentFF3\ADVFF3Component\Release\ADVFF3Component.pdb

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ