479dbfd9cfcf5ef1bcf8e651bb8f6799_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

479dbfd9cfcf5ef1bcf8e651bb8f6799_JaffaCakes118
Size

137KB
MD5

479dbfd9cfcf5ef1bcf8e651bb8f6799
SHA1

73e9ff281f843068303cf9e5a7f33dce5f9ca6fe
SHA256

9182b43d4b91b913445441c989b8f061e53ca3b16dffea0e91bed4f3f7bb48c3
SHA512

5a8cbe94c48cbca4dd2cd2cf0d900542ae6d079be350200ab6efea862972172ddb7e9712705a69af91ef2bc0991132311eea8349063c07d469492d3efa9ff644
SSDEEP

3072:yN30WnECT4qTRMp2wW0ElMSLbWk4IiSCKvuqdY+P:yp0Wf/TKpFW0wMSW/Zguqn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
479dbfd9cfcf5ef1bcf8e651bb8f6799_JaffaCakes118

Files

479dbfd9cfcf5ef1bcf8e651bb8f6799_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DelFilex
Install
ServiceMain
Unstallx

Sections

CODE
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ