cf0528373ac10449438db5c3e6e582ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf0528373ac10449438db5c3e6e582ff_JaffaCakes118
Size

105KB
MD5

cf0528373ac10449438db5c3e6e582ff
SHA1

c15256706c3930a9cd741ae33886095b2254db2e
SHA256

a243ed5fe0fbe3cb986c22f623aa93cb48d3f888b753f04adf9bc51273495b81
SHA512

10ef843f328b1074776f4d20d4f1dad371ff5bacc9f718e97a0552644c9bd7ba1958b97954daaada9688ebf6479316822ee1225230977898840dbd63b5a5edc0
SSDEEP

1536:AA+QZw3D84SAqHdsJboytAfqJD+GvXDMYqxEZt9foIO2NnToIf9K9I0e:A06I6JbSqJSAXDnKETI2FTBf9We

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf0528373ac10449438db5c3e6e582ff_JaffaCakes118

Files

cf0528373ac10449438db5c3e6e582ff_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ