d3865214ec842e0cdf7d8ec9a281ba34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3865214ec842e0cdf7d8ec9a281ba34_JaffaCakes118
Size

525KB
MD5

d3865214ec842e0cdf7d8ec9a281ba34
SHA1

51248a0f6e888151c093cb3358f8c84fc1145349
SHA256

aff77ed4413ea3acdc8ed2366e21660274b16cc1bf1a3510964b39e7ae8191e6
SHA512

2af7b78ae0e91b1866191d21d38cfb04383adeec84da3b0b085e4f3222b3d2172db6f72aab41f828f300119579789f9a5920dd33f6b6ce3fd61f00c9655a4dc1
SSDEEP

6144:RZO9/vgsGreXyyU+Bkm9eDFgZcnednwfRHBSnRzmrN9dt/Ig9A5hvLFEw62cTBor:eJFtyyPBEmdnAGmJ9dFX9YFEd2cTNDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3865214ec842e0cdf7d8ec9a281ba34_JaffaCakes118

Files

d3865214ec842e0cdf7d8ec9a281ba34_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ