25b34b055fb4c6eb72e860783dfaf54a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25b34b055fb4c6eb72e860783dfaf54a_JaffaCakes118
Size

409KB
MD5

25b34b055fb4c6eb72e860783dfaf54a
SHA1

f81a52c4d23485816211afae195fd034f0adc04c
SHA256

a1b3977aa34a58d77ddcbdfe2421b9f35233803ec35b960aa94fb4556f013eb3
SHA512

605b2a81c1209155f524ff47be3ebbdcd14e9ad3986ff0f0c87a89dae345620f203ce5683be9389d2293bb2931324fc05f4b32fb5f405ac8917fd2367d233670
SSDEEP

6144:A7241MBS5+NTP6DdRZr11VzZGyyGgehhBxeiGYMs6sEjfc1R66pjgl:J41MBS5+1P6Z11VtGxGgDMMh2s6jG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25b34b055fb4c6eb72e860783dfaf54a_JaffaCakes118

Files

25b34b055fb4c6eb72e860783dfaf54a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ