9610d8f71cbefd812e1d332cf4bbe326_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9610d8f71cbefd812e1d332cf4bbe326_JaffaCakes118
Size

289KB
MD5

9610d8f71cbefd812e1d332cf4bbe326
SHA1

bd239b8f87663f8b0028bd70d88b05987d30759d
SHA256

6a7faaf5d7521151e9966177d61b8b6c0305819ddf9d02f66caa5631df109f23
SHA512

0d6ca9097e13ddf59d250a483e18a484e761abba758fa91af47dc38a77874708de202de0a3de636578492b88f2fb4a19d2a10cf4a3009660a003bc903adfb5bf
SSDEEP

6144:Gyeig8BA0+NSSf1HC0cBZGIxdcCvCyGoakx1zVjqeoIEC1AGTBof:GGBA0QSSf1LcZGOBVuIEC1AGT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9610d8f71cbefd812e1d332cf4bbe326_JaffaCakes118

Files

9610d8f71cbefd812e1d332cf4bbe326_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ