0c6c9dfdb2ccd847096f2d1a24ae2ff8_JaffaCakes118 | Triage

Sharing

General

Target

0c6c9dfdb2ccd847096f2d1a24ae2ff8_JaffaCakes118
Size

109KB
MD5

0c6c9dfdb2ccd847096f2d1a24ae2ff8
SHA1

68a4388c697e296c15ef8a3cc25bc1a1b2663c0b
SHA256

1e0f1d9537b50eb004972a2b959879d4b65427b8431d0defc5bc3e49687a5248
SHA512

c5d2a02099da348fa9dc45f25decb4f59363c184a5ca068f2c76face966b8ccfb067a843e09f0f50e628feea4797bc4038e59dc7220448e37b69f56e89e9ace2
SSDEEP

1536:PRNdfc2m4682OFsO9hLQLFaXXGf5YT3iPdw0PgQE3pcZm56MF1HEXTb/I9xKx4o:Z046CuO9hyFUAdwQ0pcw5twXTjI3K7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c6c9dfdb2ccd847096f2d1a24ae2ff8_JaffaCakes118

Files

0c6c9dfdb2ccd847096f2d1a24ae2ff8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CodeSeT
CodeSprite
ServiceMain

Sections

CODE
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ