f949122a50112a5f6d4ad0e6a4a887ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f949122a50112a5f6d4ad0e6a4a887ae_JaffaCakes118
Size

133KB
MD5

f949122a50112a5f6d4ad0e6a4a887ae
SHA1

f76719e61796e7df506bd64d869d98aa96349179
SHA256

29b140a7d927724dcbfa0583c985cac3b9586dac189f0b55f8b537a57aeff725
SHA512

b47bd000ac995200bb6d7ee20213d1bd18010a79b1851509daf28a151a175d4eb828c762d46111b6737b017f29b7b44d547fc20d0aeac166d2363ba90688511f
SSDEEP

1536:vmPgbL13HDuDfG2D8A+n3UirQY3BWXwFD9pRECj/r6TezvdpSOn7IO/9uI2tuQ+N:YgbLZHg4QYRpdf6Mpht/9uIhQPi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f949122a50112a5f6d4ad0e6a4a887ae_JaffaCakes118

Files

f949122a50112a5f6d4ad0e6a4a887ae_JaffaCakes118
.dll windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ