d48457c6590c0ece473d4499f7a410cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d48457c6590c0ece473d4499f7a410cb_JaffaCakes118
Size

525KB
MD5

d48457c6590c0ece473d4499f7a410cb
SHA1

198c8207d2edbbeead53d751b12266b3f8206743
SHA256

4d536deb0d5a4223b91ac304740e13fad9f0ba8aa41d09ffc7d0b158b8fcefe8
SHA512

2aba31cedde4f77bbe6d0397209288c10ee206fb387c4e55dc7a5f96d514624cb2654b11daa678b963a31899d57502c05ea87093af6fdc231d4cfc6af9cb7df5
SSDEEP

6144:lZO9/vgsGreXyyU+Bkm9eDFgZcnednwfRHBSnRzmrN9dt/Iv25bDFnC32cTBhOnX:qJFtyyPBEmdnAGmJ9dFoaFnC32cTSeA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d48457c6590c0ece473d4499f7a410cb_JaffaCakes118

Files

d48457c6590c0ece473d4499f7a410cb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ