4dac95b4b109e49dce3fae7638921269_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dac95b4b109e49dce3fae7638921269_JaffaCakes118
Size

1.2MB
MD5

4dac95b4b109e49dce3fae7638921269
SHA1

73c5b973ec0a4cb06cb81ac51cc937376e8a22af
SHA256

5b94ae795683b6e24c1839ccaad84b23021c1a5195a54da56b0d54559604ec85
SHA512

8a8b112c7f70e334d53bcfc9bfc4b65b3e708fc82ba58359c64fdcc3a3d24ed6e8431a398a915ca8aa480aef98fc3fac33125793ce5d843632d0aa3ea656dea0
SSDEEP

24576:OLfKKwAK2DZ58vmd9IQaiWV4bgeDJ2QBnzit3rX50VFQE:ww892y9RaiW2LgVr2B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dac95b4b109e49dce3fae7638921269_JaffaCakes118

Files

4dac95b4b109e49dce3fae7638921269_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textidx
Size: 594KB - Virtual size: 593KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CONST
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 166KB - Virtual size: 478KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fnp_dir
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fnp_mar
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ