1b0139e4a60d074c306994d36497bbc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b0139e4a60d074c306994d36497bbc1_JaffaCakes118
Size

32KB
MD5

1b0139e4a60d074c306994d36497bbc1
SHA1

4d298e9a8245827a5ef5e005442bda4f0530296a
SHA256

ffc1f9801d808f363e1b3d571da551de6165c5e07bbcfa851371a612f3dc1cb6
SHA512

0341371c6cc2ce1351ecced32c9f0a510bbcf8d72d4227be75afff3d89454f2c27e5a9699b00ef2b2d7c34de91335df5f85505fc19fa1ca4c03abc0a89a617f6
SSDEEP

768:pUlVZc3dOX4UqwJMI5r5dzrlw+RVLBBHRmKc:ilzc3deOtslF++DEKc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b0139e4a60d074c306994d36497bbc1_JaffaCakes118

Files

1b0139e4a60d074c306994d36497bbc1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

BadApplicationServiceMain
SchedServiceMain
ServiceMain
SvchostEntry_W32Time
ThemeServiceMain
Uninstall
WZCSvcMain
WdmWmiServiceMain

Sections

CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 64KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 263B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ