853daf2276a6941c475af85eb6905b5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

853daf2276a6941c475af85eb6905b5b_JaffaCakes118
Size

116KB
MD5

853daf2276a6941c475af85eb6905b5b
SHA1

ad084ba08a4a2735349957e28502cefd72bea47e
SHA256

393e038f5be0ec333640ab281f2a90218ea1f05254d0db940dd9ff6a5f461d86
SHA512

18b62d11596ca46ab324756206b5c47e642a2a55d81fce17486f15e0fd22d2722a88b4505822cd7b4de71ae3eab72170f8a47b2a27700b1d6a56fd8218d0ef4d
SSDEEP

1536:DFy07a/EoaKaqsULomwt3aZdKCaPTc2MGwXFORztKwCejNLCtysOsUD+iP5f:DFyXEyGULQiKYfXFDUpyUlBf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
853daf2276a6941c475af85eb6905b5b_JaffaCakes118

Files

853daf2276a6941c475af85eb6905b5b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
StartMain
Stop

Sections

CODE
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ