8d99c7e5967d1143378a476c3c898fb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d99c7e5967d1143378a476c3c898fb6_JaffaCakes118
Size

353KB
MD5

8d99c7e5967d1143378a476c3c898fb6
SHA1

ef4ef23137be4e87663daccf5f93c009b38f4153
SHA256

b53da8898b03b817c4cb8192f1b54f411b1f33a8500b72f96ae3cbcff16ecfb9
SHA512

8310a5d31784934381e0e7492ae9efd020f602baf6da8826449cf2ad5c1f7a021f67688db7c7ee8d05a396f4c13afda15b485d122fe2011725f147366e6763a3
SSDEEP

6144:J0cHk1Fi80k0DjlLSfVmT9YoawkuvUkU1aTmtyYBeyZxH1dYP6qp:GTitNDmV2vuaTmty+x66+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d99c7e5967d1143378a476c3c898fb6_JaffaCakes118

Files

8d99c7e5967d1143378a476c3c898fb6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ