8cc58ce0b180d0ad73bbfffa88212152_JaffaCakes118 | Triage

Sharing

General

Target

8cc58ce0b180d0ad73bbfffa88212152_JaffaCakes118
Size

332KB
MD5

8cc58ce0b180d0ad73bbfffa88212152
SHA1

6a0b701ab181d4a94e29bb559ea12aba3b714004
SHA256

d6a9f02b35b90e302b2dc62dffd4114111e9e6e50f333331f3cc9fd6967324d7
SHA512

e7c77e02ac2622caf4ce6198fe991ffbd0c073cfab85c0fae33d29ec128a2e2f976bb1e11d7986ea5b582c27a0b85fa09bdb8514babe128ace052a35221643fa
SSDEEP

6144:6zOv6LwhJWv3mWGDVSjZ0ddcepen2Cj9nJ1KQMM9x+TBQiaRW:5rhJWLGEWcesVnJ13Mex+Tl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cc58ce0b180d0ad73bbfffa88212152_JaffaCakes118

Files

8cc58ce0b180d0ad73bbfffa88212152_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
ServiceMainManual

Sections

CODE
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ