3de4a6f2a292250580fe9712cfdceab3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3de4a6f2a292250580fe9712cfdceab3_JaffaCakes118
Size

93KB
MD5

3de4a6f2a292250580fe9712cfdceab3
SHA1

881286f805ac4b9fda043b51f4389ad5b06d3b3a
SHA256

8172f0668d7ad1cbc5d26875f8e622249f9bd57a08ec554ce95f5be87595816a
SHA512

de4348d8963988bfe171846ab4e31eea86d15198284f99401d1ef9d61f872fa59f9f75abb0f270289cc12d53863f151d2386e2b38efa1c3132cb7ab7a504f08b
SSDEEP

1536:5yjbZcgCPIBQOicuI/dg/ZoqPsuj4QfGjOpr/nX1MBRoY2Q/9Q/7:4jbXKCoqdg/ZBEQf9MBr2Q/9Q/7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3de4a6f2a292250580fe9712cfdceab3_JaffaCakes118

Files

3de4a6f2a292250580fe9712cfdceab3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMain
DoService
DoMainWork

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Share
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ