78857b978e332bebeed070a1ce6a8a74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78857b978e332bebeed070a1ce6a8a74_JaffaCakes118
Size

619KB
MD5

78857b978e332bebeed070a1ce6a8a74
SHA1

3f3a462899e7ff16e670bae9686cbae12bef6aea
SHA256

c7ba1b9f66952ad27f52845f4eb19661af26d7c83ebe0e11caefccdd7499df8d
SHA512

5a3b31896496a358f70feded3e756d30bb914dfb9dc424203049d1b4fc93a7e4adcb9f9ee825f31765791f8bcbbd0f60aafc5b1f86d2256b6127a784326471b5
SSDEEP

12288:oWGz5FwYkK19iOCr+TMoO30mYn0YaAsGhQlxM5oKTrH52s2O:oWGcK19iOCr+TMoO30mYn0YaAs9lxM5N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78857b978e332bebeed070a1ce6a8a74_JaffaCakes118

Files

78857b978e332bebeed070a1ce6a8a74_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Install
Launch
ServiceMain
UnInstall

Sections

.text
Size: 459KB - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 510KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

NewSec
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE