eb74b6e270157764caf223620cfa20d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb74b6e270157764caf223620cfa20d6_JaffaCakes118
Size

85KB
MD5

eb74b6e270157764caf223620cfa20d6
SHA1

5e2ca64a0e781a14c937bd9cf9140793fce9db38
SHA256

2a9976f514b29241d9ad2ce7ea337ea3bfac622a2c7678d4c5ffd8ac9c012e4a
SHA512

2ed3a9f9b28604d4dc00872f91a8a8f5ec1399415d589844b34c4640dd6030a87a94506e1dac4ac1bcf96d603efe7902f899dd255a9b64e595be1e8db5171889
SSDEEP

1536:6tZ6BcgCvI+KOocuI/GprlFVmd/g4TotPOhr/nlslBtoY:MZ6fOxaqGprlGRTollBX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb74b6e270157764caf223620cfa20d6_JaffaCakes118

Files

eb74b6e270157764caf223620cfa20d6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMain
DoService
DoMainWork

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Share
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ