8713f5c0fcfe7b98bbaa485345473dfa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8713f5c0fcfe7b98bbaa485345473dfa_JaffaCakes118
Size

67KB
MD5

8713f5c0fcfe7b98bbaa485345473dfa
SHA1

daf76fc64b9d0de88c58a7afa192ffeee7c80210
SHA256

5995935d738a5f295d1322d4896c60afd8aa43deee0db37f46a69034e653baaf
SHA512

fa21dd4ee5c17fe5c0dd3b0f4ed04b23c9352aff8466b7a65f8a1b9ea558626eee30fb0560ea2e79bb82cfc8a63c38268750ce4110efa60cabd81183fdd23ab5
SSDEEP

1536:EfyW2NmtBKrp3s89MzqbORjAbXFgfCPRTe0Mm7xD:ATqrp8xzqiRj3GRT5Mm7t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8713f5c0fcfe7b98bbaa485345473dfa_JaffaCakes118

Files

8713f5c0fcfe7b98bbaa485345473dfa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

414bbecb22d0e559a1e7255775f02ce1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
LoadLibraryA
GetProcAddress
GetTickCount

Exports

Exports

SafeSvcMain
SafeSvcUninstall

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ