ed41319a9a7eacf4866be0cd71a4655b_JaffaCakes118 | Triage

Sharing

General

Target

ed41319a9a7eacf4866be0cd71a4655b_JaffaCakes118
Size

95KB
MD5

ed41319a9a7eacf4866be0cd71a4655b
SHA1

709553b57735fdac7ce5cfd0d7a4235b6d6a51a7
SHA256

db66ffdf6feeec43f28a807c33d6c50e80a5b293ca417b9ecb6b00dd7a36768c
SHA512

009409dcb0a7f6ceedd855e7987856b3575eeb4eaba79d0be9fe8101ae3bf41841eae1619a5f4c29bbf781be4eb4d2a68b25001b71d2291866aa506d492b9d32
SSDEEP

1536:jxtLWJcgCmIxKOocuI/JqLM0vm2Cg4G4tHOhr/nIbpxpoYhfjwoGU/MYUP:jXLWn3oaqJqLMDRG4Rpxzt3GUEYUP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed41319a9a7eacf4866be0cd71a4655b_JaffaCakes118

Files

ed41319a9a7eacf4866be0cd71a4655b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DoMainWork
DoService
ServiceMain

Sections

.miss
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dosdt
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bbsd
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.musd
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.smdaa
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.Neroxps
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rukou.
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE