b87d0dfbe75f281464f6b4e86f3ca728_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b87d0dfbe75f281464f6b4e86f3ca728_JaffaCakes118
Size

146KB
MD5

b87d0dfbe75f281464f6b4e86f3ca728
SHA1

0840f4f872c32b18f0633806672900e218da619a
SHA256

92151961c8986be11713a56acaebdb0fe147596f42ba6e851d6f3212058ebae0
SHA512

5afd6cdf50d8a8bbb42c4ccd455a762395cf9ab114eb5b56af7a6e919bd8896dbddc469f72c95d1bd3a149d3442c4579bf32a02731e7ee75bfdd6e552e9f68dd
SSDEEP

3072:R7R3sENOxwEdYX8uEWthKum/GROAK7aY/dNkAKk:R7R3sUOqEdYXZ/hKu7ROd/dNk3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b87d0dfbe75f281464f6b4e86f3ca728_JaffaCakes118

Files

b87d0dfbe75f281464f6b4e86f3ca728_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DoMainService
MainService
MainWork
ServiceMain

Sections

CODE
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ