fd4e69280c82c4e34c13760117818671_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd4e69280c82c4e34c13760117818671_JaffaCakes118
Size

24KB
MD5

fd4e69280c82c4e34c13760117818671
SHA1

4689c23eeede8252ba37f4d3278f8164e0b57002
SHA256

54e204419ac6ff4853f40b7a6fa83a3a9bc97c22cd04cdf1130cce0889cd19cb
SHA512

b9a98dcb98dea12c64a95de6e46e59b1ab692a56b2b99ca42aff2f4be8766b428bd57f2710e3fa09a2f3ab38db30f7dcf87ec10d28dd3b3b9896b23bf6413877
SSDEEP

384:wGiNEL2PIbUD7vGcCJyTjdi/Dm305qEH3tA7m4BsgBX1aRf:BlL2Q4D7vGcRGDhgQt6XBX1a9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd4e69280c82c4e34c13760117818671_JaffaCakes118

Files

fd4e69280c82c4e34c13760117818671_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ihternover

Sections

CODE
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ