fc260fa7470f7c76708f2005ddaa7257_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc260fa7470f7c76708f2005ddaa7257_JaffaCakes118
Size

144KB
MD5

fc260fa7470f7c76708f2005ddaa7257
SHA1

ccdeb32c26b798c0a2ca07c78f9eeeb4cd1143b5
SHA256

aaafd847ba3341104e4b6741e608f65dc8c3be8ac40ead02886f3d45bf786d44
SHA512

6eea5e03c2da547fa5e0260a21b992e90df9d597b58e68ff9a9ad465f4e33ba10279486550c186af4167be3811058ff33fc2ac6eba44046ac94fbbd955afb233
SSDEEP

3072:2lUyljJ68Ax3f0XDLjU30rSQTBfVnRRL:2yys3f0zLJ/TBdnRR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc260fa7470f7c76708f2005ddaa7257_JaffaCakes118

Files

fc260fa7470f7c76708f2005ddaa7257_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ