3b04fddcd0a4ed0df8e243726aca57f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b04fddcd0a4ed0df8e243726aca57f5_JaffaCakes118
Size

105KB
MD5

3b04fddcd0a4ed0df8e243726aca57f5
SHA1

29e545f19b4ab015dd53414804f6ac391555ece9
SHA256

e436e1c6f30be1c80565e696edb22cedba81e5ee85c503ef2043f472b1e94508
SHA512

c8df5726b040211b37820182d005e023f300ecabd431e163679cb2c33b9298de29650766ef9ffcbaa541e3e4d36230a527a23491d4a1ac7e15bbab377e5a94e6
SSDEEP

1536:8A+QZw3D84SAqHdsJboytAbnHtJaK0OIO2NnToIfFx99NT1L:806I6Jb6Htw82FTBfFFL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b04fddcd0a4ed0df8e243726aca57f5_JaffaCakes118

Files

3b04fddcd0a4ed0df8e243726aca57f5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ