865a431de62e26958a82d751a018bcc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

865a431de62e26958a82d751a018bcc4_JaffaCakes118
Size

91KB
MD5

865a431de62e26958a82d751a018bcc4
SHA1

59d01ff3fa22cc25881a389dfb82900018e7cba9
SHA256

8f16b1186c5605195dae66e1948fc30cc94a8d4a8d39af3dc87192602d775877
SHA512

b0bef18c461b360809e5ab65d04f994dc6ca1ef44bb10f51351c21f7aa8c49a52bfb1a4b59090357b01d497c0d187f3a76e5fc2c4e1fd12ac0df53e1ca1d7a5b
SSDEEP

1536:XKq3hQ3BVwGfOcnJf2xqYG4IntFSr/yAi9++HY3E5h:6AkbwFWJfa7TIdAj+HY3E5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
865a431de62e26958a82d751a018bcc4_JaffaCakes118

Files

865a431de62e26958a82d751a018bcc4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Qy001DoMainWssk
Qy001Service
ServiceMain

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Share
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

jiajia
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zaijia
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE