4e101111c02810d85a3690e3a196abc8_JaffaCakes118 | Triage

Sharing

General

Target

4e101111c02810d85a3690e3a196abc8_JaffaCakes118
Size

34KB
MD5

4e101111c02810d85a3690e3a196abc8
SHA1

b0e517a7f43d9f027a40bc4c7170d9a6b10d39dc
SHA256

2833d38400d5ac34b74cae71561d681e3fd244bab51cda887587584094c07b09
SHA512

8e8728c2c870d829da96bd6960402e76fc1dec4975845006c71df273da74bb10f097a501eaeea0013cfa444987ed4583aa9a3d619a95b38db2e3e559223ff46b
SSDEEP

768:JHeHq51szazGUQYkIJu4Pp88LXmW+hnS1uaRvv0:wHq51saDW8nMnSkavv0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e101111c02810d85a3690e3a196abc8_JaffaCakes118

Files

4e101111c02810d85a3690e3a196abc8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

hhh
wmhkof

Sections

CODE
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ