4ce05e47f355e6808f6cfe200b2fceb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ce05e47f355e6808f6cfe200b2fceb0_JaffaCakes118
Size

371KB
MD5

4ce05e47f355e6808f6cfe200b2fceb0
SHA1

466285e99324b0d7846d0d1a9a300831558142a0
SHA256

a0eb7ab7d7bc748b407bedf1ab5fd6db8523e3801509a442cc389421606d7426
SHA512

fcd336a2d1180b490bd16eca330c67afdc7c1f34eb618698e4258e0a2b18fe8fc4252d59e117e60a8d6e1743f234efd3f8d21efde7148078926e0b1c924beee1
SSDEEP

6144:bbikZ43VWMzHhnpNjYChRlBGtHZf1SvSpVYAnsQQeFuQiWq8vWbrzTBlCAOl:Pi5BrZPlBYHF6SpUeFBqRrzTXCP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ce05e47f355e6808f6cfe200b2fceb0_JaffaCakes118

Files

4ce05e47f355e6808f6cfe200b2fceb0_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\P4P\DHT+P4P+NAT_PPLive_work\kade-dll\Release\kademlia.pdb

Sections

.text
Size: 319KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ