31a3d4a60b913409cbcbf9f857a83913_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31a3d4a60b913409cbcbf9f857a83913_JaffaCakes118
Size

124KB
MD5

31a3d4a60b913409cbcbf9f857a83913
SHA1

31490930765398b4337fa74c6f1387fe1cfb7b4a
SHA256

290b006474782c7f233ac8d061609754b0eea34fc1c451720f3748ba0e3aafd0
SHA512

b47d464022324698b586463fbb4363d9ea9665d8f4faf0da868ca8b20045caf95af6216e2dad4a834c85a2ce49616b2f4690d9927e3f45615da8a95ae4d3b5e5
SSDEEP

3072:8yFswNN9uXCr+awu2hU65xd2pkIjWfw/bVVO:8eswNNDiawu2C6/d2hWfw/bVV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31a3d4a60b913409cbcbf9f857a83913_JaffaCakes118

Files

31a3d4a60b913409cbcbf9f857a83913_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Install
InstallEx
ServerMain
ServiceMain

Sections

CODE
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ