4aaac1e49216294323123240830cd164_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4aaac1e49216294323123240830cd164_JaffaCakes118
Size

160KB
MD5

4aaac1e49216294323123240830cd164
SHA1

4d382063537337d242dbe1cf7ad404a4b616c9d0
SHA256

26ae33c8060e475167f3e47ef4bf6bc62662b29cd1a6177abd5399b695bfde62
SHA512

b370b1e36ed339d9c0712a03e2c3fdc9f8c324abd0d1e03a6b38135fe08728ac7a9e18417b3757c3b5dd6a910856a6b7f68bd5dc6d898f1048780ea9608d1e54
SSDEEP

3072:G0KkCdgAZwCwX6L8JZb3L9erR+xD9z9zVXriENpZ1GIaH5K:X61shbRe1CD9z95XneIu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aaac1e49216294323123240830cd164_JaffaCakes118

Files

4aaac1e49216294323123240830cd164_JaffaCakes118
.dll windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE