JaffaCakes118_4a66da9ec9dc9efaad28530e80c6b662 | Triage

Sharing

General

Target

JaffaCakes118_4a66da9ec9dc9efaad28530e80c6b662
Size

53KB
MD5

4a66da9ec9dc9efaad28530e80c6b662
SHA1

6486e525ad8f33a0ba2057b0aa4d0afe8f3aff54
SHA256

256382c52f0eaca4399c7877e9ee2133e71aea63ef1948d23533237298af39b3
SHA512

3fa4bfe3c09eb4c7042145b1e41ebf97f17da0ab38e239707cbcc673e3f5cf4ac4da8e03ebc4c54ed46867dad3c770042d653d2881dc0948b77bddc9cc9102bc
SSDEEP

1536:1Gy0NTeh8mPKjm0oqflGdOJhUINsmZWwF:D+qh86cRHWaUIemZWwF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4a66da9ec9dc9efaad28530e80c6b662

Files

JaffaCakes118_4a66da9ec9dc9efaad28530e80c6b662
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Install
MyNewFun
wintest

Sections

F3.f{
Size: 46KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

F3.f{
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

F3.f{
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

F3.f{
Size: 411B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE