96f75b8e0b7f84faff2ca5da808f6df5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96f75b8e0b7f84faff2ca5da808f6df5_JaffaCakes118
Size

593KB
MD5

96f75b8e0b7f84faff2ca5da808f6df5
SHA1

8cb1fb9b46fa787e8d713497813c8a191df57535
SHA256

ddf5f75469ce093296b9f978a9aa1d40eba80a61a18fcb34da723d147529532f
SHA512

6c0e6ef2949dc1336db6635fe1a08d6fc4f6798a9fd133eedbfcd4da89b318c22c5d61115536a02ce0ed8a09ee37d2f1e8a9beaa4d5c0160ea706a531fc4e979
SSDEEP

12288:yy7Qe6QOZcEDdkDyLHNVrBkNHnnNHRBKMN3YQTsGmJnRTPWxb1y3hl0F:Z7n6jboyZVr2Jn51N3YQfmRTPvxaF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96f75b8e0b7f84faff2ca5da808f6df5_JaffaCakes118

Files

96f75b8e0b7f84faff2ca5da808f6df5_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Install
Launch
ServiceMain
UnInstall

Sections

.textbss
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 578KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 878B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 128B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ