b70264678a99d8b53e2364a537419825_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b70264678a99d8b53e2364a537419825_JaffaCakes118
Size

185KB
MD5

b70264678a99d8b53e2364a537419825
SHA1

80fd41d1ce576f9d957161c8700a7b0e0c2fa018
SHA256

f717683716b766962970a7744205bbdaaf5e349e6e22b70bccc2e44b3df61390
SHA512

d90f4235a64e8bfe2e014a702a04f38b3211b60a30791db617ae0a7b7a0dfda4bbde5337515ec34d2201d60c54c40d91ba1834db4629be6ecbe1a902a39f8398
SSDEEP

3072:w7g2VWUE8MjmhJTG0lhwZ/ml/ksuiSbxk36uVl7JMRZKZmW4+Q7PG+up6HGdopw:w7g2VlE8yQTrlhwMl/ksDWkKWVJMRZKB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b70264678a99d8b53e2364a537419825_JaffaCakes118

Files

b70264678a99d8b53e2364a537419825_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllRegisterServer
ServiceHandler
ServiceMain

Sections

.textbss
Size: - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 177KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 591B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 123B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ