039fcae46b949476a76ce7faa4f5cf13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

039fcae46b949476a76ce7faa4f5cf13_JaffaCakes118
Size

143KB
MD5

039fcae46b949476a76ce7faa4f5cf13
SHA1

df85a20f0e1fe7b7172470330a8ce86667240fc7
SHA256

40bd7f558282ee19dbcd7a77121e7b8d6d8444e91634f7a7dff49179bb616b2d
SHA512

22b30b2f61cc97cf172623246de0cbdafe8e4fba3aeaf0665f2a65f66bf27b438a901d9fbc09edd16f1c38241344455e45af968fa445f371bf41b3b139dc7572
SSDEEP

3072:vlUyC1xa0I5HsfmB1U3xh04MTBf1nayOv:vyyeeB1UolTB9nay

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
039fcae46b949476a76ce7faa4f5cf13_JaffaCakes118

Files

039fcae46b949476a76ce7faa4f5cf13_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ