af49d5317afed67a61b4ec465965ee05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af49d5317afed67a61b4ec465965ee05_JaffaCakes118
Size

357KB
MD5

af49d5317afed67a61b4ec465965ee05
SHA1

538a06d6224139c7f3cdceaa3ba75bed778e33b5
SHA256

bcc27c4b0ab14edb710605019245cfcc4f134ac3480a669ca2c6158f7cfaa175
SHA512

6cb008fe9f8652e5509ea66b8109e13b9536bde41de6cffd2c476c0d09e6bbd7a331781bb57812625d1b473805716e80467213e9dba15466527cc6d29210c57f
SSDEEP

6144:nJ9MnxBKM6Q3SzOf/QG5VnmefFQPxguoaGcuSeYqfKv9Ql3GMCjTBR:snLx6Q3suIG5cGSe949Ql30jT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af49d5317afed67a61b4ec465965ee05_JaffaCakes118

Files

af49d5317afed67a61b4ec465965ee05_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ