04d76086803dd9b1d81274356a04b7cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04d76086803dd9b1d81274356a04b7cf_JaffaCakes118
Size

802KB
MD5

04d76086803dd9b1d81274356a04b7cf
SHA1

f678586a05d10c51644641ff2b00f18415ae7ce6
SHA256

a9be42ccd0447a60935072833cf63144b7f4cb2eab1bd2e00d9a4bf9688f91ca
SHA512

ef9d19d7e7922eac47acb7d63248f71c2bce08f39c5f6e1372a34073754a04aa04317ed1f64c55de6b80302f56682c9d9de39b5da413fd563ef687ca58edcd86
SSDEEP

12288:x5cWFjGdk+vo3sMMcQqqoRiivGdl32NbtL1y3ssdSG9OJHbXJ/HNgbb/G15IG:x5JcRsuffOJ7XJ/HNgbS15IG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04d76086803dd9b1d81274356a04b7cf_JaffaCakes118

Files

04d76086803dd9b1d81274356a04b7cf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\LocalSvnForDailyBuild\lonely_tr\bin\tr_release\log4cplus.pdb

Sections

.text
Size: 692KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ