4a003bd704132913d0481a98a96245c8_JaffaCakes118 | Triage

Sharing

General

Target

4a003bd704132913d0481a98a96245c8_JaffaCakes118
Size

26KB
MD5

4a003bd704132913d0481a98a96245c8
SHA1

d228dac49eab83370f8da51ad301b8da036f428b
SHA256

49aa5b783f6dbf2c11e4c055e03b32edde3222e903d2c8f8ed80babe826bd31a
SHA512

9fdcd1d4c19eedf3201ac2d0e4213562f1513303c17281d79a196a22e905f0cef198a20b16bb7c706aed65d2969961ec44d8ac6a6c857f80f4bd2cf45bf64db5
SSDEEP

768:c3PZiV7twf5nawDPHGA2+JLfts4OOJiGOyQOr1MCv:sLfLHGA269ZOyQOrr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a003bd704132913d0481a98a96245c8_JaffaCakes118

Files

4a003bd704132913d0481a98a96245c8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Checksum
DriveDisc
GetFile
GetMemoryAddress
GetPerMission
___CPPdebugHook

Sections

.Data
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Code
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE