c96898f2f5f4ee781e8cb73fa410dfba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c96898f2f5f4ee781e8cb73fa410dfba_JaffaCakes118
Size

85KB
MD5

c96898f2f5f4ee781e8cb73fa410dfba
SHA1

b925174d14511ede9f210c697a19e29fb6a19424
SHA256

1d53be44d0f238134ff006f5e318c676dddcbf0949cc159db2d6cadaef2aa17b
SHA512

abbb87cfed15745ff749451cdb017d5b2667e78572b0444927f313535d5fcf14921606cd25a44b234fe46c4ca0e09dceefd6919860750d11fe958f736f073782
SSDEEP

1536:3tZ6BcgCvI+KOocuI/GprlFVmd/g4TotPOhr/nvaeBtoY:9Z6fOxaqGprlGRToVeBX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c96898f2f5f4ee781e8cb73fa410dfba_JaffaCakes118

Files

c96898f2f5f4ee781e8cb73fa410dfba_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMain
DoService
DoMainWork

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Share
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ