29a5b003f238fb080fd9645b618f361d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29a5b003f238fb080fd9645b618f361d_JaffaCakes118
Size

63KB
MD5

29a5b003f238fb080fd9645b618f361d
SHA1

785a7cb9e0de88dc965d91ae1e94a2e222eb8272
SHA256

74b2c16a3ce5d0d44780868b8c18db423b62b683fbd2a323cdc230e4111d0ebb
SHA512

c78658e8a214d01f78c7ab0a68127616827ca3b1e89210cdce033000eb8d4903101ddb921a37fd35fb67264d9e7a593bbcdbb10b1bb8dd5d1c7c38183fdae2f5
SSDEEP

768:tdGvJuh51O/szqazvtUas2vBJ0seCrhUPvTaia7kydMh6HkfB7yjpqVIj3r3apN6:tchqbzZtFsseCJi5JFy1f3r3qMTz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29a5b003f238fb080fd9645b618f361d_JaffaCakes118

Files

29a5b003f238fb080fd9645b618f361d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ