95a0030393fdc9d64e132733cd2ba0dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95a0030393fdc9d64e132733cd2ba0dc_JaffaCakes118
Size

331KB
MD5

95a0030393fdc9d64e132733cd2ba0dc
SHA1

9b801583687c8ae50f235ac2ac6090d11825af03
SHA256

1328eae4a2327f8f8769c99a10060a9bee914b9bed2427c0e49ad25fde768d47
SHA512

9226410810f34b03b14e6f179ccc9022bcfa3fbd4a8c1756adc6b842dd74b617f6323d04b636a397930401908912e1de93bac2db054d2b8cfa816255faf4c86f
SSDEEP

6144:nMU0p3u6rWYLVguHvPkOSPpWkv1/5aE7xxTVPzjvpl:zYlrWOPn/gxN/TtxT5b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95a0030393fdc9d64e132733cd2ba0dc_JaffaCakes118

Files

95a0030393fdc9d64e132733cd2ba0dc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
ServiceMainManual

Sections

=�m0
Size: - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

=�m1
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

=�m2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ