2cd0a47f133c7a5da6c60ed690d2939d_JaffaCakes118 | Triage

Sharing

General

Target

2cd0a47f133c7a5da6c60ed690d2939d_JaffaCakes118
Size

526KB
MD5

2cd0a47f133c7a5da6c60ed690d2939d
SHA1

0d1e2da4baa77fe46b5e4997ef6bccb28239b300
SHA256

62294139d9188b2f514bee8ffc070c8ae8f315c23ccc65f8034a21d9d086b819
SHA512

dc89ed2b195b0cb47c37f0b2b585769ec4fc1f3a0e532b5b447afb1236fe02bbb50160f873ba74e6fc6747952d2dba6cfceb992c83f086217b085f62d9e7f359
SSDEEP

12288:SdW3KYCCvMTW8XO7ORHuEH8BIVrVBpk7u:UuPCCvMa8XndcKVTp6u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd0a47f133c7a5da6c60ed690d2939d_JaffaCakes118

Files

2cd0a47f133c7a5da6c60ed690d2939d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ