a56613508444c413bdfa9de3865406aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a56613508444c413bdfa9de3865406aa_JaffaCakes118
Size

56KB
MD5

a56613508444c413bdfa9de3865406aa
SHA1

3c614de7d3754d1e301ce76d8e671c821b2c0c5c
SHA256

00124b2248e61bbaf11d900a81a2f89d9113f1f770df1be4f2e0ec6487b271c7
SHA512

e96acb4ae30375db1e10f6a9f02403e44178b61b4f08c324db6ded1a385934d1339b03ab8d7dd2e4cd3e15527d931884ec420deba891d5d796147c0e4eab040b
SSDEEP

768:N6c0DQEoI21200Oahn8zAl7PmRNX0eMabwCk0UEYPvMj48ITp3UextfNtaz24Ruh:N6BDroIVhnxm/BMAPYPknI1Eej1wq1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a56613508444c413bdfa9de3865406aa_JaffaCakes118

Files

a56613508444c413bdfa9de3865406aa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
ThemeServiceMain

Sections

CODE
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 66KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Oreloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.neolit
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ