4b053b17b61bc8be4374bc63649212bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b053b17b61bc8be4374bc63649212bb_JaffaCakes118
Size

152KB
MD5

4b053b17b61bc8be4374bc63649212bb
SHA1

a50518451808f00590d1a93d82f40dc852ee4975
SHA256

46eff13b927c511572d7b8c3f186a66531c01f52933870edf6afcd9e345d51d5
SHA512

b588a74d2bfad1a6eff8bb0a2d774ad104d68ab01e374688063ec3fa830d5d6608b5fcbd5c81974adf9141fffdebc9c80af1ae25430d6710363b67f53e4faef6
SSDEEP

3072:LqoOQQjZ/WM09hlR9Ck1JjYRHXzBOT3rKTBC9zq9JcnKntmBxg:LqfQQjZ/WMG7JjIBOrKlWzqUhBy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b053b17b61bc8be4374bc63649212bb_JaffaCakes118

Files

4b053b17b61bc8be4374bc63649212bb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE