4d9aa0b3c5d0f742b2e658f64b1e1ad8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d9aa0b3c5d0f742b2e658f64b1e1ad8_JaffaCakes118
Size

1017KB
MD5

4d9aa0b3c5d0f742b2e658f64b1e1ad8
SHA1

de98b65411687cb3f3fc6cf63100f50a9c9910b4
SHA256

347326c4dd7f0a563084370658e88c9500b7c3f61f0a044ac3803a3c34e83cee
SHA512

d5d13f592bdab52035d57467e9b0075dad0904487b6f93a8ec65190b038825d79977d86a3c5c4c630f787e12e39d359adb9ed875a78b158ec31712ec7761fbc7
SSDEEP

12288:MlXlpBz9oQJ5qdsNQy5gw6b+va9I4rjB4bIDkEulQ/unEIZUlxOnY7a+1LUH:M9BzJ5qe2BLSv5BbSdIKxQXgUH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d9aa0b3c5d0f742b2e658f64b1e1ad8_JaffaCakes118

Files

4d9aa0b3c5d0f742b2e658f64b1e1ad8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Main

Sections

CODE
Size: 634KB - Virtual size: 633KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ