5bbd422fadfa5a735d76ccf8f05c7c7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bbd422fadfa5a735d76ccf8f05c7c7d_JaffaCakes118
Size

433KB
MD5

5bbd422fadfa5a735d76ccf8f05c7c7d
SHA1

cb871e81912caed7dde147b70411907239976e10
SHA256

462db6686fdf5b7f38b765558e76337159279c1e0d67237adb701d2a5aba4d87
SHA512

7df662e28656e8a6c67f66d3b33ac373f141b06f68b65f371be59ca78ed5ce69e4cf8ee9af829f804dfdb1ff7d3669a8205395ba0bae8610d0e5c0b772423535
SSDEEP

6144:S+J6cPpODxCdS7eOUQ41RYABkbZoJW+W+6KnDdv9u2d1F8MoJzsp+hYTvCV+CmdO:SyVcCbSbIt5Q2F8vyTvCVauqcE+n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bbd422fadfa5a735d76ccf8f05c7c7d_JaffaCakes118

Files

5bbd422fadfa5a735d76ccf8f05c7c7d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

InstallRT
InstallSA
PSLIST
ServiceMain
StartEXS
UMain
UninstallRT
UninstallSA

Sections

.textbss
Size: - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 424KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 794B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 207B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ