af8a3bb100ed4f79ce484cfcff07c347_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af8a3bb100ed4f79ce484cfcff07c347_JaffaCakes118
Size

133KB
MD5

af8a3bb100ed4f79ce484cfcff07c347
SHA1

e53314e6ac2ac882a237c094aba9c6d9c4acfd40
SHA256

d80f0b70e58a31e6c4c0da0e7ec846aa771309ad6ce42916ea4bb705b6b99fa2
SHA512

195b8ab7a4ceae037a70a9dbc9eca5368eee5db7f7260515ea088e2fe7887beed204cefe56860c72a5ed6553d635182453c106a1545ef33dbbd6cfa880a8b246
SSDEEP

3072:C0wpqFXW2lNhOUGx9jwzZwfsuiS/Sq2KdYBTWe/nkxbEZ3c:C0RFXRls/wzQsuXf2K0TWe/nkx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af8a3bb100ed4f79ce484cfcff07c347_JaffaCakes118

Files

af8a3bb100ed4f79ce484cfcff07c347_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Install
InstallEx
ServerMain
ServiceMain

Sections

CODE
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ