f1a32e2e2f9aabd919188f660e7d4356_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1a32e2e2f9aabd919188f660e7d4356_JaffaCakes118
Size

63KB
MD5

f1a32e2e2f9aabd919188f660e7d4356
SHA1

a7c5cb7f8a9ebd7a941e7be0685379a36f7f391b
SHA256

b6f3367672a84ca481666b15ad1908e3f63dc0ad3243a7ae45546fb5264bf537
SHA512

f5b5ca45c7b705bc54a2325c97b4ced679a979ec1312595d94f48b2899f7230d3076fba20ec61ebc4b8731234f9f41a6534e15acf1e9cf057bc7dc80c350562f
SSDEEP

768:NdGvJuh51O/szqazvtBSzdG0Gv8xSNj49UIjCmca90uhcmn9xGuTlSB9IP:NchqbzZt8nsK0a9LhNhp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1a32e2e2f9aabd919188f660e7d4356_JaffaCakes118

Files

f1a32e2e2f9aabd919188f660e7d4356_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ