08b25dc9863532ce2cba51831117018a_JaffaCakes118 | Triage

Sharing

General

Target

08b25dc9863532ce2cba51831117018a_JaffaCakes118
Size

357KB
MD5

08b25dc9863532ce2cba51831117018a
SHA1

b5ba45744dd9737df7ab08183f0751cb5ac9409a
SHA256

f12505e44022518e6da9db41f1f20b96ab6059284f5a7f79eb3358f40b896249
SHA512

6813fc294114bc7a395e7df623a370c9e397ec4e4113ca48be774c11245fe9d1a81219df175c132af8d5d4c8611b9e26b25d4f3ccdbd76e897a527137fbd45bb
SSDEEP

6144:kJ9Mnxck/ipE3za46Q+Gjw/f6mpTaoFoa+SRWT35i3JyMiUoljTBd8A:vnykwE3WZbGjyloT3gEMiUoljTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b25dc9863532ce2cba51831117018a_JaffaCakes118

Files

08b25dc9863532ce2cba51831117018a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ