956666efabb526c3e362440d7f6336f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

956666efabb526c3e362440d7f6336f2_JaffaCakes118
Size

356KB
MD5

956666efabb526c3e362440d7f6336f2
SHA1

66f4a32c26f52317652ba74ca3dbfe2499f621f8
SHA256

1455ea2c1c8c65f592dc8c459f116fac7470052fdc79aec8fdae8232eae59cf8
SHA512

17848f195cec35415933485370e557aaeafe251726831d18ee70f51d121c5eac284d324bb9403e45cb4d686cc7f9be6f5da540bfb40ea779fcb9eed7f5f8635e
SSDEEP

6144:TA9MnxXYFXQzRd9GLsL0BQvg+LRfAoaC23FtocqhHzcx39MjTBhMhCH:tn5YFXQVd9GLsSQo+s3FWhzcx3OjTPX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
956666efabb526c3e362440d7f6336f2_JaffaCakes118

Files

956666efabb526c3e362440d7f6336f2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ