29272a74784b2f158ae83e2edb2c46da_JaffaCakes118 | Triage

Sharing

General

Target

29272a74784b2f158ae83e2edb2c46da_JaffaCakes118
Size

124KB
MD5

29272a74784b2f158ae83e2edb2c46da
SHA1

3c3f58563b02081e3d450576a0dea14879320d00
SHA256

b9c1ba0ee4db0b8417c7ad1a059872c7ff275b2fa422dd7f5df45669840e6563
SHA512

b68a8843b8c2b74c3520f161b151d280bdb1052805cfa9aac4bf062e2c202fc643fae4abbf153fd2b9f8ed71b09e76c407a5fb6092c143370b7f19b5a075e68d
SSDEEP

3072:ymHbLOuJcW7wYfhm8FkwZOxtu/rrwzoQ4y:N7LBJ/wy1Fkw5/r0zoQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29272a74784b2f158ae83e2edb2c46da_JaffaCakes118

Files

29272a74784b2f158ae83e2edb2c46da_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
neishei
neishei

Sections

CODE
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ