0e4c87879cc6017dfeec33d72461d2d9_JaffaCakes118 | Triage

Sharing

General

Target

0e4c87879cc6017dfeec33d72461d2d9_JaffaCakes118
Size

531KB
MD5

0e4c87879cc6017dfeec33d72461d2d9
SHA1

bd953326f51928a485d7661b9ec9562bfd543a38
SHA256

47c25d0b92c022b3e4d9489f6e6533545267f928c2d3a3bbe1f3f6782dadceda
SHA512

b073a1c97988c1da04a8f1a28291f0c6cb9b102e142c89eeb815ade39d24b3fb6560fb6f46a051e4c6681a307865756ec144f33ce44de6561015d1217e2dd80b
SSDEEP

6144:Tu/vizszFULRgfHGuqc//2mLabjJXFrn6k+lzeiArVEWvA+8UuTFEqFZ4bHr2gTl:y3iN2HGu81J1rn6hfUA+2FF4bL2gTTcm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e4c87879cc6017dfeec33d72461d2d9_JaffaCakes118

Files

0e4c87879cc6017dfeec33d72461d2d9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ