ac63934b343c45e22b3f89e4168ef5dd_JaffaCakes118 | Triage

Sharing

General

Target

ac63934b343c45e22b3f89e4168ef5dd_JaffaCakes118
Size

422KB
MD5

ac63934b343c45e22b3f89e4168ef5dd
SHA1

d85169349c424d27c2f15bd6a30d002797d96881
SHA256

395424df9e52633b5a261f8c460ea1258fada952e1257e3c0c71b53f1e11bea6
SHA512

303a1f12825eda46e3223408f59926dcf6c5137782218afefa67d3d7ec0bf39c257d69b8becf3ffdb30eaef9f0cb4997328dcd7441f7f06ec1fbd9311fae9e2b
SSDEEP

6144:TSHD2UPsaUbaHVC8tPFSF1Q1Q241icd/d2wvHfrVG5:TSj2UDUbyttPFSF1Q1Q2Eii/d2iG5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac63934b343c45e22b3f89e4168ef5dd_JaffaCakes118

Files

ac63934b343c45e22b3f89e4168ef5dd_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SMSvcHost.pdb

Sections

.data
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ