b5cb6e412f2cc930f16a302edd940dd5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5cb6e412f2cc930f16a302edd940dd5_JaffaCakes118
Size

124KB
MD5

b5cb6e412f2cc930f16a302edd940dd5
SHA1

8fb82314c5d75968e98d03a51ed6a78eac29d810
SHA256

b54cbab0f5e167c1589e4bcd239dcc6d7b5173626db640a3f86a7358713092e5
SHA512

20bf95c23843af178c84ad873a1816f6ded7135f269e5ad5b80aae36accb4450ef5d13bd40292983dbef8f0f68ac4769e19ab174b0ebae979e64ce9fcdff5ba3
SSDEEP

3072:VyFswNN9uXCr+awu2h46cxd2pkIlWfjE/b114:VeswNNDiawu226Md2/Wfo/b11

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5cb6e412f2cc930f16a302edd940dd5_JaffaCakes118

Files

b5cb6e412f2cc930f16a302edd940dd5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

iNSTALL
InstallEx
ServerMain
ServiceMain

Sections

CODE
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ