4d7e79b31edb8a81d96482332380abbc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d7e79b31edb8a81d96482332380abbc_JaffaCakes118
Size

539KB
MD5

4d7e79b31edb8a81d96482332380abbc
SHA1

f82addbf9b0c6c5d11d01c82091795d4112dfe2c
SHA256

b504e3f54b384f0bd715c3f9c1f38b7d110322216ab3ff8c254346199f0c67a1
SHA512

07643a308c77322abf38f9164637a1ec4b5733489d7ee351e10bca786b1a9630eb0506006ec64ec1485630f6cf7cdfc8b5387706e1a1f7a3745ed3c1e953d506
SSDEEP

12288:ZKD8JIlo7iH6oDHkVG7N0H7jNaNn4okGhv07kWmITOyt:8wJN7iH3DG2yje1Xv07YITO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d7e79b31edb8a81d96482332380abbc_JaffaCakes118

Files

4d7e79b31edb8a81d96482332380abbc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 460KB - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ