4ad4d641442defda23363cc0d5649dd9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ad4d641442defda23363cc0d5649dd9_JaffaCakes118
Size

374KB
MD5

4ad4d641442defda23363cc0d5649dd9
SHA1

74352216c68d946dda022b879825fe7c506c6c2b
SHA256

585b86ec26ac3b0137a9b39e897f36b7ee511d5d7662c58a52982f1e6fb90cb4
SHA512

8c145d44de1123cf1d3f390ad471cae19395f57cbe0ea010f26e01b0993ffcaf7e70f34628622712cabecfe6d84b2284e560bc168288bf0e1224ddbf305a4df8
SSDEEP

6144:FiUTgVD/8aUCbGHHVbc5lSBrLq/nRU+daL1B4xD0WwNEY:FiAoDkTCinhnBiU+dM1B4xDR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ad4d641442defda23363cc0d5649dd9_JaffaCakes118

Files

4ad4d641442defda23363cc0d5649dd9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4ae8cce1cdb668a8fad907517a62efc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ReplaceFileA
Beep

Exports

Exports

qcdmh

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ