ace8f9708cd67ac3b36f0cadca90299a_JaffaCakes118 | Triage

Sharing

General

Target

ace8f9708cd67ac3b36f0cadca90299a_JaffaCakes118
Size

133KB
MD5

ace8f9708cd67ac3b36f0cadca90299a
SHA1

fd2ca61ff21dfc46e0d0baf853bfb1ac5bc261f4
SHA256

9c8484c65ab5e69691175d0762c0e8e09ee5fee0d2ecbe75a31f5418a7eaece2
SHA512

0f32b15b9250ec993921bca72ebb69d3eedb2401772c2252e9467452ef3209a52521fdfe86f700388f035f5d7d6bfc0fa42dc18e3a69d8d733bc7f4e3b87c1e4
SSDEEP

1536:gmPgbL13HDuDfG2D8A+n3UirQY3BWXwkD9pRECj/r4TezvdS623lIO/9uH2tuQ+K:RgbLZHg4QYRodf4MS5v/9uHhQPl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ace8f9708cd67ac3b36f0cadca90299a_JaffaCakes118

Files

ace8f9708cd67ac3b36f0cadca90299a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ