5f2a00119efc0ccc71fae9f8a52707ec_JaffaCakes118 | Triage

Sharing

General

Target

5f2a00119efc0ccc71fae9f8a52707ec_JaffaCakes118
Size

133KB
MD5

5f2a00119efc0ccc71fae9f8a52707ec
SHA1

bc44b0ce1cec98a5ee5d487aec52c8eeea1d9d76
SHA256

2da09c99a64aab933ada929334c58223118a7b41519371a8641f218e6788984c
SHA512

9249f0e8fbc5271f61ca0db2b3301cd4c1ee958e8793a34fe124082064aabd7221918646409c18eeec7b64511ce0e68229f8c8971b9dc7ff2f5958e028f1eeb3
SSDEEP

3072:tgbLo93/nR9QYfB6teFDIOSOaqY/kMsqb4P9X3S:tsLQp9QyB6teFDIOed/kMsqM1y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f2a00119efc0ccc71fae9f8a52707ec_JaffaCakes118

Files

5f2a00119efc0ccc71fae9f8a52707ec_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ