feb0bc1f639b7599db2da587b44ec364_JaffaCakes118 | Triage

Sharing

General

Target

feb0bc1f639b7599db2da587b44ec364_JaffaCakes118
Size

160KB
MD5

feb0bc1f639b7599db2da587b44ec364
SHA1

98aa75faddafe3517d68d1fab566b32ee94a0e57
SHA256

037d57f0810e7c891c730c6f86d0eaefadd79fb703afdc666f051b236a887aea
SHA512

790031896cbe072717db81b1cebc0cea6c76bebf137aa8728195a732a0756a06ecc996b5d4b6beabb5cecb25995c91aa4379084014ca45f7b97dbf9534e1c512
SSDEEP

3072:nU+DlRKLTVAgqbTAa/cpv3Nza0fxgrNTk1/b/QZQ16boOwIi99K:nU+DjKNFqbTAtd3OcAoOw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feb0bc1f639b7599db2da587b44ec364_JaffaCakes118

Files

feb0bc1f639b7599db2da587b44ec364_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DelSelf
Install
ServiceMain

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ