4c6033eccf79921c434efd4a8ccad612_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c6033eccf79921c434efd4a8ccad612_JaffaCakes118
Size

98KB
MD5

4c6033eccf79921c434efd4a8ccad612
SHA1

ba93a7855b4db1d3a1ff61b2e83e04d7b5597035
SHA256

4492dbcb2ea89da51b22949071ce20a238ce047515415c6eee87d8e41b6bd451
SHA512

c676d2e4af8d9baa7ad289bca9556ab7a6057ef93c61d33976d98b05763e4aa678eed37af9a9fbfcd79878d50637b77c09eaaeb4454c5bd8fec1f26f3e4b002b
SSDEEP

3072:LqoOQQjZ/WM09hlR9Ck1JjYRHXzBOT3rKr:LqfQQjZ/WMG7JjIBOrKr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c6033eccf79921c434efd4a8ccad612_JaffaCakes118

Files

4c6033eccf79921c434efd4a8ccad612_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 109KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 113KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklav
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE