db8b544fee1c83e760ae63f746acc0a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db8b544fee1c83e760ae63f746acc0a5_JaffaCakes118
Size

636KB
MD5

db8b544fee1c83e760ae63f746acc0a5
SHA1

393483a860bcdebefbe208445ab92bfd8d385ebc
SHA256

e54cd38f06be6446b57c454d4c0e530cb3c5b3366f15bd1bd382f816583f999b
SHA512

0f2400d170d30c1b8d174d02a7e285d9c950c716bea0118ae203e9b467bbee03a8f9a23fef977d69ac8cb910770ade0b3f87a5fc8f2aba913f9737e085ff0c7f
SSDEEP

12288:A1fz8GElImoa/WgMEs5/TTyca9b729TnndTqV:A1L8Guoa/3MD/mA9TndTqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db8b544fee1c83e760ae63f746acc0a5_JaffaCakes118

Files

db8b544fee1c83e760ae63f746acc0a5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

KSelp
SetSvText
SrvStat
SvcEntry_Seclogon
writedllpath

Sections

CODE
Size: 528KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ