4dd2a8d142fb0b32b879d9f887b3d79c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dd2a8d142fb0b32b879d9f887b3d79c_JaffaCakes118
Size

132KB
MD5

4dd2a8d142fb0b32b879d9f887b3d79c
SHA1

b1b905b9de68995396bfffca714d4431a2453853
SHA256

c487f843747e39bfd6c0f53cf9d938d87e96c0df4f7488c9313f0e1b12ba5a95
SHA512

30c3052f63ebb438b85991fcaed3c60dcdf09b59d6367553eba3d8510e17e165194751a918dd4c8096b15a82b23c58145d86c70a61ce4b8db3fa12003afebf87
SSDEEP

1536:gmPgbL13HDuDfG2D8A+n3UirQY3BWXwkD9pRECj/rYTezvdSSr3uIO/9uH2tuQ+w:RgbLZHg4QYRodfYMSIc/9uHhQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dd2a8d142fb0b32b879d9f887b3d79c_JaffaCakes118

Files

4dd2a8d142fb0b32b879d9f887b3d79c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ