4c6f8a991f2133b2569deb213e359881_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c6f8a991f2133b2569deb213e359881_JaffaCakes118
Size

644KB
MD5

4c6f8a991f2133b2569deb213e359881
SHA1

eaefeb242b088f7364882d00bb604982e6bbff28
SHA256

841938705592c5b1c70426a6a640ea4ad2f40c3fc8e5ca572560d1793476738d
SHA512

94ccfb81992309870d28d8e18157bfdee1ffc36349699a0d860116c039cf20b516f4f314b48757424e6771ecb883d2e5869211e6346fc50df2792ad48c2ec01d
SSDEEP

12288:bJ7kqLwipwcXLAQzqTjh1SSMCs/u4GCTeS8GBxguw0C0Qnm+UfcwAtpSbQn+CcnN:RkJ2pcyoZkH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c6f8a991f2133b2569deb213e359881_JaffaCakes118

Files

4c6f8a991f2133b2569deb213e359881_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

@@Opis_serwera@Finalize
@@Opis_serwera@Initialize
@@Socket@Finalize
@@Socket@Initialize
@@Tibia@Finalize
@@Tibia@Initialize
@@Unit1@Finalize
@@Unit1@Initialize
@@Unit4@Finalize
@@Unit4@Initialize
_Form1
_Form2
_Form4
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 540KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ