ecb3fa5aa91539fd11a8b605c9830a8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecb3fa5aa91539fd11a8b605c9830a8a_JaffaCakes118
Size

110KB
MD5

ecb3fa5aa91539fd11a8b605c9830a8a
SHA1

51a03ff9583e7eae43a9a641563b1262b1a65090
SHA256

825a5dc99f0705f13649dbad0e3917438e3b2b876c3d09bef14e3537fbfa07d1
SHA512

ea0a83db4e95622b7fdb91cee04e11ae77275bc80e9bdd0a837509dfbe306728ea91bcb8182188cf2956d9f32e20f5f9a9e81b8c950a2912559c298e24e0b673
SSDEEP

3072:1nTwo3UxEZL8J9gL8x7aJrTcB2pHtW12MV6EtW+o+Oeu+OeuI99:153mey0n22W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecb3fa5aa91539fd11a8b605c9830a8a_JaffaCakes118

Files

ecb3fa5aa91539fd11a8b605c9830a8a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

I
ServiceMain

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ