4ddf171945396b66a5c9fe3f58522641_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ddf171945396b66a5c9fe3f58522641_JaffaCakes118
Size

238KB
MD5

4ddf171945396b66a5c9fe3f58522641
SHA1

572501be61aaf4783dcbd007b2c9f7e475e74ade
SHA256

2e44510c13887625d3f15c99369a6bafd61a8e96eb2def888b62447d21ff7311
SHA512

85d4d023b7c1a87e725505f4c3251d85c55d36dc45be1c15961e342855b2ca140867c126132af41cd614fc31d278ee9d60ae3a6eb147349b32a14786cb595f5f
SSDEEP

3072:XKmH8H/Jk1+cB3iWdxow21tB+CF6ovzGvP+vOGrIoQ34IyOLdez/k6:PHw/2diWdxow2PB+O6ovMoQokLozM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ddf171945396b66a5c9fe3f58522641_JaffaCakes118

Files

4ddf171945396b66a5c9fe3f58522641_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 45B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ