eb7fb53ae652fb12bade17dadb296e70_JaffaCakes118 | Triage

Sharing

General

Target

eb7fb53ae652fb12bade17dadb296e70_JaffaCakes118
Size

80KB
MD5

eb7fb53ae652fb12bade17dadb296e70
SHA1

4c4b8a20cac46b8d6848b8da73e76c2ea7596041
SHA256

e031370033309b0e0512decb7612bf0a9d181d7c9a89622546786f0e3c1546e3
SHA512

76818ab12ec2aef86d22e245ed50b73b57c74fb0adca3301b4219e1fc143fd196c35e1dd5ce535685463001c2a93d24ddd52e89cf7e0b2cc223c1a5e4788ee99
SSDEEP

768:w73JcMyYd7Tnwt0qGd10hawufXqr1mK/QPkV19wedgfEBdjUOvT2Blimmcyws4Q8:acQdt4awMXsZwedg3BLmor4aaPPxs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb7fb53ae652fb12bade17dadb296e70_JaffaCakes118

Files

eb7fb53ae652fb12bade17dadb296e70_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Maintenance
ServiceMain

Sections

CODE
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ