ec06931dcb477ec335208b1411e837fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec06931dcb477ec335208b1411e837fe_JaffaCakes118
Size

182KB
MD5

ec06931dcb477ec335208b1411e837fe
SHA1

8900e6eb5f163d487b8f751f8dcf336e80210d33
SHA256

117ed3bede04c3843073cbe0e37466028238449753084e41813ed47492df691d
SHA512

2685e4c78ed86d3ca9a8353884c3a4ad31c2143ed4ca8dcc3a9b9b9ef3672b26673b5d92768fb49169ef6bdf6383667ea22a29a52b1f0918ff184085de1d1761
SSDEEP

3072:dCWbns2WIZn1AUC6pKDy91Pp+IuS7oTLs+0t/Lv8Lqp/Ux9wxwgG0LvHLl/mDVfb:hTkayV61n8iFkxmwgG01uDzkjkh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec06931dcb477ec335208b1411e837fe_JaffaCakes118

Files

ec06931dcb477ec335208b1411e837fe_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
alexaFaBao

Sections

CODE
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ