714878cbab655638a6eedbdf5f43c5a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

714878cbab655638a6eedbdf5f43c5a8_JaffaCakes118
Size

478KB
MD5

714878cbab655638a6eedbdf5f43c5a8
SHA1

99abf18dfb522be751ff742a3c6210f34c45c6d6
SHA256

350afcb76dae33c628c8a6b3c21be389be509cd5b767ddfd6724d9b26c76d6a6
SHA512

4961a6f8132571df83d5ed881a0c0f55408d522d30f7344110bb69bd62a0ebb4fa40b93be88287384a34d844e01efc0a8ef4b88f0f25a2379d156dca7f694dc0
SSDEEP

6144:jp+Ss6iGrvUk2WwyVLJRxoaaqQYvJzb5UeVf8Q3omI4sxelV+5cG7T2d:jW6iGrv5VoYRJUeVf8QpvsOUcG7C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
714878cbab655638a6eedbdf5f43c5a8_JaffaCakes118

Files

714878cbab655638a6eedbdf5f43c5a8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 421KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ