62258e00cd4be879cd086925d8069d45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62258e00cd4be879cd086925d8069d45_JaffaCakes118
Size

331KB
MD5

62258e00cd4be879cd086925d8069d45
SHA1

7129ab0758930c37089553eb8f1b0463931b0b6f
SHA256

1cd1a5a85a4a1d3f235fd59ccc7bbabda3f6e523d7f55d118af24825bdd3a194
SHA512

2b6d0f3296a13a63e4de4c1b84269c94fbd37c51362447517ac2aee8ff9709bd291ad3050d1bf509386f18c8181c56a194ad24d70281c09be1e26ff86cc0c437
SSDEEP

6144:VRlcHphOnUDAqdTss4lhWCS8ioa1H8q6ZqHddVVGLTB9O89n:qmnUDXTsfkuq6Zq3PGLTf/9n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62258e00cd4be879cd086925d8069d45_JaffaCakes118

Files

62258e00cd4be879cd086925d8069d45_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ