2f351728aa5eb7c07b8da7d8ea65e5c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f351728aa5eb7c07b8da7d8ea65e5c7_JaffaCakes118
Size

41KB
MD5

2f351728aa5eb7c07b8da7d8ea65e5c7
SHA1

fd53de535b266198adf058463ce22bd315004dcf
SHA256

d5a859fcf77ca294df948c8f8f8d7e9f82ad93a871abc5d738108e6d7583885c
SHA512

601697e6ba725e9bccbafae662d19c0ea3db3eff6830193828b31176205d063b91975a5f8b3491b4a35aa8129c4b29e5b5f959c5a9d0077936ded9dbe29ee050
SSDEEP

768:ev+umqS1szNb0ID6I9UpRNgPqdzbHz6yN4ao+gicxcTLz+bkGd:HBqS1s56Ii+S3o+gick/C/d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f351728aa5eb7c07b8da7d8ea65e5c7_JaffaCakes118

Files

2f351728aa5eb7c07b8da7d8ea65e5c7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DoService
DoShutdown
DoStartup
DoTest

Sections

CODE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ