4da1fd35b2486fd737d86c4a9a610fd9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4da1fd35b2486fd737d86c4a9a610fd9_JaffaCakes118
Size

71KB
MD5

4da1fd35b2486fd737d86c4a9a610fd9
SHA1

0d7addcf69e7b58d909da4b2c94dca2321d44729
SHA256

3ec7378d1a5a72e0e0884fb816f5dd9c06c452131946c46f17a1175a37a889fc
SHA512

6587297788116ac1d37433f046f2e2507aced0c58148f5a45888ddac857f287783a2f7cdb0acd343a7e3441b005f7858c2ab054f090e61fc6ff27600df349c4a
SSDEEP

1536:jhT8neDbzaHOA/NMCyK54EqHhZnnkaE4il:lT4syOoOnKFqBWhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4da1fd35b2486fd737d86c4a9a610fd9_JaffaCakes118

Files

4da1fd35b2486fd737d86c4a9a610fd9_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\winclient\pptv\logclient-windows\Release\logclient.pdb

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ