5fb96a0ef1ac6102b7758109a1bef75d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fb96a0ef1ac6102b7758109a1bef75d_JaffaCakes118
Size

93KB
MD5

5fb96a0ef1ac6102b7758109a1bef75d
SHA1

3e94a42caabfe892b468ded8cb7e3afcacddba26
SHA256

c86fbbba920160fb6030b6dec2cfb9d0814cab533e958bf4450250fd333bef6f
SHA512

d23aeda66efcaec95da217d9112bb4a9ed160c0dad4f11612d495d373e2805aa7148c557a1390f9e98bf04b75bb256b8f20a3905fcc778c7aeeb1ff39a0ead37
SSDEEP

1536:RtZ6BcgCYI+KOocuI/GpClFVmd/g4TotPOhr/nHOeBHoYWsDH4:3Z6fNxaqGpClGRToxeB5I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fb96a0ef1ac6102b7758109a1bef75d_JaffaCakes118

Files

5fb96a0ef1ac6102b7758109a1bef75d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMain
DoService
DoMainWork

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Share
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ