4b2a38c386bfe2c4f9c8a34a39b5666d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b2a38c386bfe2c4f9c8a34a39b5666d_JaffaCakes118
Size

174KB
MD5

4b2a38c386bfe2c4f9c8a34a39b5666d
SHA1

006156aac76a41d02423c5c01c5bf406a5b1c6da
SHA256

1cc408eb95d63e397e05d7d8ca3258a3c3c413b4879aecde6f3a780a10884198
SHA512

0e671ff6b2af1452aafcc2880afd6ada5eba411a836d8e7a3c6d8eba73b3b235c6d624c8a6222805f9e6d36ba8aecd65fd6f1f0ed9d72397a694c4ca1d288250
SSDEEP

3072:4ZO4Rd/yv8GoZegvVSbymnDSnyHOTgkTCxktFy7JHVtWZdt:F4r/iEIznun5gsdW7NVtWDt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b2a38c386bfe2c4f9c8a34a39b5666d_JaffaCakes118

Files

4b2a38c386bfe2c4f9c8a34a39b5666d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 104KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE