3457de6bf25f31232fa03f6aaaf2212b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3457de6bf25f31232fa03f6aaaf2212b_JaffaCakes118
Size

89KB
MD5

3457de6bf25f31232fa03f6aaaf2212b
SHA1

b9e70439cb7f267d85b2fb06ac9399e5d4eb233d
SHA256

484968626d9ad4cb19d0b8c8567ad80c993b06b5308bdaa9ce4d1e1e664a5529
SHA512

dc168fc26b16b83d0da284cc81ab48c942ee246ca043ffd387e4d03e573618f1673903cd5cf84b96a3869270778c09b34b2c424bb0f3bbdd7d814f8a1f908f94
SSDEEP

1536:YPjZQ3xawGfOcnJa888ez4BjucXrbHnm7yfj:Yj8IwFWJaRH0Bdnm7yfj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3457de6bf25f31232fa03f6aaaf2212b_JaffaCakes118

Files

3457de6bf25f31232fa03f6aaaf2212b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

111111111111
ServiceMain
Qy001DoMainWssk

Sections

.guoc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.guocy
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.guoc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

guocy
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.guocy
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ