0024a7f634704cb37a3b712f7baff53e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0024a7f634704cb37a3b712f7baff53e_JaffaCakes118
Size

103KB
MD5

0024a7f634704cb37a3b712f7baff53e
SHA1

899ee24214a61b112e12e09fbc54341e37c8a39e
SHA256

051ca42b7ff3a93f9ffb49d57f06b95b85822e0a587f7910097de48d910f8cf4
SHA512

a1dbae153c2ed94b8797a5843d5c09979ad90936e9c0cbbadddbe821bc13830750c4163658e1331c9ff5edad0ccd947e5dd67cc1f2cdd9ebdce4512006b5c6d2
SSDEEP

1536:kOuaLOnTIQTiOIbuM03PrOW/b4goJFKrGK9+PVHWUmfOCmAj:eaLHQfzd3PrR8gLUnKj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0024a7f634704cb37a3b712f7baff53e_JaffaCakes118

Files

0024a7f634704cb37a3b712f7baff53e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

kedExVaria
Service88
ServiceMain

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

grhji
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xxx0
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gfrth
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xsx0
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ