d380bb942048c55c6a06003ea70b5a74_JaffaCakes118 | Triage

Sharing

General

Target

d380bb942048c55c6a06003ea70b5a74_JaffaCakes118
Size

114KB
MD5

d380bb942048c55c6a06003ea70b5a74
SHA1

dc52ae1de093da30f44a495dd42db34d0a6df6a6
SHA256

a1d0c92d1196533f33ed62bfdb99811981cd856f7ecfe2f292572b9cb23416a0
SHA512

93dba49858ab984297ffa098c264f34caf1e9026987d5302391c61b4657d4c2db2f383c901e364eda2541a58b90465eec81521ff58f1f3f145b857bc4873c521
SSDEEP

3072:Qlet9sM0MaSZOIZSB3cIX28ZXS720AaoNJ1tg8JB:ptNpaSZAn/aO1i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d380bb942048c55c6a06003ea70b5a74_JaffaCakes118

Files

d380bb942048c55c6a06003ea70b5a74_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ