b1239131a5ed43736d2165fa68aee377_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1239131a5ed43736d2165fa68aee377_JaffaCakes118
Size

331KB
MD5

b1239131a5ed43736d2165fa68aee377
SHA1

2ad7270fb92d6213853bb90d104e51a6b0be04fd
SHA256

aaec2e22bcc4ecc9c2588b647ee0c327ab8b87592b4c77c765794798f1d00315
SHA512

02c3209b07cf72cc326f5097720c790cdf4440890312af6c9b4c3a73ee45331ee7200f25d2a91dd74d1ada1e5a9d01135d0467503e4f25c4244b8f96aece5fd6
SSDEEP

6144:bzQaJAfgvWreQIkqr5JrxaKPAr4hc0KtSU9IKZP+TBQiJVHX3s4:4/gvWlqr5l0ec0ySU9z+T3n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1239131a5ed43736d2165fa68aee377_JaffaCakes118

Files

b1239131a5ed43736d2165fa68aee377_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
ServiceMainManual

Sections

CODE
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ