4cb0b88ad6fa2bd71b6218da7cafaa22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cb0b88ad6fa2bd71b6218da7cafaa22_JaffaCakes118
Size

360KB
MD5

4cb0b88ad6fa2bd71b6218da7cafaa22
SHA1

54958aa42dcdc8bb6759dd0e14c1d16512c3aef4
SHA256

cf2c45bb2f569f523efc537a62f4e7489ab1951f48179852d7f4d2151c39fd92
SHA512

7cbdc9a7768a12a34b5ca15353ec80036735eb610291f3cc6e39a78c8cb47f3381fb7d4115d905045976d0a9ad739587c9b8bd88d1504673a94757a84e4c6bc3
SSDEEP

6144:hJ9Mnxu0ihgmzKwXVocY2tLCzGFroaeqTlDkGQqyfi7Lc9HTBeyTIJ7:mnI05mzKBcyqTlDt6fi7L0HTVTIJ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cb0b88ad6fa2bd71b6218da7cafaa22_JaffaCakes118

Files

4cb0b88ad6fa2bd71b6218da7cafaa22_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ