eb412ecf5b90ff622c57e62502cfdbbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb412ecf5b90ff622c57e62502cfdbbd_JaffaCakes118
Size

800KB
MD5

eb412ecf5b90ff622c57e62502cfdbbd
SHA1

58e350e182a98990e9ff7030a417e6d651b81200
SHA256

acdffc911bcdec3f458aca32bb8f4a6764799d1374caa8b59cd682c0a33496a4
SHA512

25567dbf105e7b7549ba2af8725b90418aeb6288cff6a7597cab8699990f4939e74a158fb9006d58602df496f89e2ee314d1f1fa2dee9ef28913ab9ce90b8a67
SSDEEP

12288:rKxl3DFGoaAaeRPQ3rtXBH7bM/EmBZCp4hGVUwV1FW1fOX8oCl2YB7B:G/3goff4rhhbG524hGVNJa4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb412ecf5b90ff622c57e62502cfdbbd_JaffaCakes118

Files

eb412ecf5b90ff622c57e62502cfdbbd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ