a0252d02d3274c5ae215900c7f965ca1_JaffaCakes118 | Triage

Sharing

General

Target

a0252d02d3274c5ae215900c7f965ca1_JaffaCakes118
Size

89KB
MD5

a0252d02d3274c5ae215900c7f965ca1
SHA1

d9e47939809bc4886a41d34af58108bc2bc2a1a6
SHA256

85b975a1e636acc1388cd681e25dc6ee4a4ce3cd967db404b2fe40716d0e70bd
SHA512

b7e6b48f4fe4ea6d71f9ed9c217bf6835eeb9d63ca08116f3d0aa1477f387f8f7b0885c1eb17e8cdf8b32f4bd7ff01c2219d36fff62526b5537e98058ed43e0f
SSDEEP

1536:EPjZQ3xawGfOcnJrn8tRz4BjucXrbHs9F6Ac:sj8IwFWJr8L0Bds9F6Ac

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0252d02d3274c5ae215900c7f965ca1_JaffaCakes118

Files

a0252d02d3274c5ae215900c7f965ca1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

111111111111
ServiceMain
Qy001DoMainWssk

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Share
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ