1a1b3d526d0f31fd236ed5d129fb2c8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a1b3d526d0f31fd236ed5d129fb2c8f_JaffaCakes118
Size

93KB
MD5

1a1b3d526d0f31fd236ed5d129fb2c8f
SHA1

d5a9700f3ab1173907ab92ea8b3a115da7a20842
SHA256

df52f581a33d6d8fc1ecc674550c3355427da27d0b4aef1a8f619a6f069cd123
SHA512

b146876ef622fedd1e4e3d229c9ddb895318bdde58f1b5fa76c0f8bd7bf2a5ada9f5487774b880fe4cee7367a8f6cae29645305755bc44c612ec267c3b121b2b
SSDEEP

1536:5yjbZcgCPIBQOicuI/dg/ZoqPsuj4QfGjOpr/nX1MBRoYv:4jbXKCoqdg/ZBEQf9MBrv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a1b3d526d0f31fd236ed5d129fb2c8f_JaffaCakes118

Files

1a1b3d526d0f31fd236ed5d129fb2c8f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMain
DoService
DoMainWork

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Share
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ