4ce7b573f16df02b439f3366dac84f7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ce7b573f16df02b439f3366dac84f7c_JaffaCakes118
Size

160KB
MD5

4ce7b573f16df02b439f3366dac84f7c
SHA1

045c3d3f6f6286efa962103480d0fc4f5110e7ec
SHA256

97d92ac70f7a370da2758342cb8fd1d4cc6b6987fedfc8ffef66fa913f37a26e
SHA512

19910a3c81c43f628d220cf73a61d3bdfdde59b38d6a0d5cd70e7adb86e9ad9ec1f9a04b0e9defc5407612ec1c1c0c1512a22568f22e2c6b54dd8396e29f0f20
SSDEEP

3072:e4BMI75hNzwQMgIViUgox+SNJjnVzOGF/G13KJq52aH5Kp:e4nPzwQMg6ibox+SnVGYq52ug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ce7b573f16df02b439f3366dac84f7c_JaffaCakes118

Files

4ce7b573f16df02b439f3366dac84f7c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE