e898ec3b007456cae51ff5a3fb13e36c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e898ec3b007456cae51ff5a3fb13e36c_JaffaCakes118
Size

93KB
MD5

e898ec3b007456cae51ff5a3fb13e36c
SHA1

cdb6bb721bade10d2df75d02a0d6cfd1c8ebe228
SHA256

cc36e7cd0a0cf1526c1f6f104f8d5cff9b4cb51540db0c1dd915ea0274d8450c
SHA512

54f7d5e79fdeb69b8f6ccb86d76392496502f49d1204469f3a6baa67380eed510ba5a0788b1a8e35ef10d67b733aa850d51b0ee495819c6bca5bab8d7b8abdeb
SSDEEP

1536:4M6b3cgCPI1DOPcuI/dU/Z7qPs6j4QfGjOhr/nzJMBpoYX9/F9/Kv/F9y:n6bFKVvqdU/ZGEQflMBzt/FVW/FU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e898ec3b007456cae51ff5a3fb13e36c_JaffaCakes118

Files

e898ec3b007456cae51ff5a3fb13e36c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMain
DoService
DoMainWork

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Share
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ