34efcd5fc158ace0f18d1da7bbf07163_JaffaCakes118 | Triage

Sharing

General

Target

34efcd5fc158ace0f18d1da7bbf07163_JaffaCakes118
Size

93KB
MD5

34efcd5fc158ace0f18d1da7bbf07163
SHA1

e452850fd5d1fd790a90ac034df702c6aa9acb87
SHA256

dcbaaf2a40741648c530eef8381eebee77137b906a475ba15d6dd2b0e07806fd
SHA512

002f236bab2b19700ee5f325ca5e7e46a194f77cbeddaa94f8788a9fa493b479d149e92f2377b07b89b5c5c4b218b3a906d9f446a8a2234ba2a7123f60fc3cfd
SSDEEP

1536:5y6bZcgCPIBQOicuI/dg/ZoqPsuj4QfGjOpr/n71MBRoY82j2G:46bXKCoqdg/ZBEQfBMBr82j2G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34efcd5fc158ace0f18d1da7bbf07163_JaffaCakes118

Files

34efcd5fc158ace0f18d1da7bbf07163_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMain
DoService
DoMainWork

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Share
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ