1a12a9d0a6b0effdc4fe759b735331fa_JaffaCakes118 | Triage

Sharing

General

Target

1a12a9d0a6b0effdc4fe759b735331fa_JaffaCakes118
Size

96KB
MD5

1a12a9d0a6b0effdc4fe759b735331fa
SHA1

dab014ac2955945f31c34e52b749deb57952189d
SHA256

eace085735a0de04563be10cbc09a77c9624cd4da1f5b160379233f717a1b9ac
SHA512

533b83aa5fa62652bd76f9ce2b1063ed9dac1fd8dd54f2045d49176e10c558e8d3f8b4bdc94430ed76260b5e0bcc2d90ae07663370573816c5df6dda924d8ebb
SSDEEP

1536:CNVCxcg6nIFMRO5cuI/9jyx5kRCu8Fc4v05j6Br/rLFDnoYvCcbxocIU:EVCvKGdq9ex5Tdv0kFDZvCcbxocIU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a12a9d0a6b0effdc4fe759b735331fa_JaffaCakes118

Files

1a12a9d0a6b0effdc4fe759b735331fa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

astributes
ServiceDo
ServiceMain

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

njigf
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tl968
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ