be98da6f1a8cdd6b5e5ef14bb4490f7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be98da6f1a8cdd6b5e5ef14bb4490f7d_JaffaCakes118
Size

462KB
MD5

be98da6f1a8cdd6b5e5ef14bb4490f7d
SHA1

f844e330c3c47c659631f249cdbfe4c0ce4e30cb
SHA256

c78375043d90d61cad6f56c56bb764b9b32413ada44ea0f04c365965543de135
SHA512

0df90ee81d4ba2ec95f8d5ba05e472fc5ecdb9de030f726234af7976a61cf1b99d82afaaebc428d4e6c9fb1cb7e6fe025d98dd230023441e261db835d58b1399
SSDEEP

6144:T76vtjE2UWM23Z7bUZGA2PqDyMt0lVrXPepuptzzuOQ5BZaOFmcSf3TBQiYFRw:SG2UWR3Z7bXPqW/rBxuOqZaOzSf3Tcm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be98da6f1a8cdd6b5e5ef14bb4490f7d_JaffaCakes118

Files

be98da6f1a8cdd6b5e5ef14bb4490f7d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
ServiceMainManual

Sections

CODE
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 14KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ