945cb2ecbd9f56956cdf76752e4daf97_JaffaCakes118 | Triage

Sharing

General

Target

945cb2ecbd9f56956cdf76752e4daf97_JaffaCakes118
Size

95KB
MD5

945cb2ecbd9f56956cdf76752e4daf97
SHA1

64ef876329fab66d09855dc43757c3bfc67398c2
SHA256

fb4c0a2e235893afc8ebb22d4d4acc0f92312a18c69c5afe9dea1225c4e971cc
SHA512

51cf91689d757dd3c898b9ce4c1f57530e4f1a085378107ed0445e90506ba118cf7f896dd1f8db923a075f4331651c4dfb27c8769cdb1193923b7c0a56982069
SSDEEP

1536:ZOuaLOnTIQTiOIbuM03PiOW/b4goJFKrGK9+sVHWUmfO6A:daLHQfzd3PiR8gGUnb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
945cb2ecbd9f56956cdf76752e4daf97_JaffaCakes118

Files

945cb2ecbd9f56956cdf76752e4daf97_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

kedExVaria
Service88
ServiceMain

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

grhji
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xxx0
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gfrth
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ