ebb1e50bf762a545b087d5f7e5dcb7dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebb1e50bf762a545b087d5f7e5dcb7dd_JaffaCakes118
Size

526KB
MD5

ebb1e50bf762a545b087d5f7e5dcb7dd
SHA1

67fac24be5c268fce654c396f4dfc02e262861c4
SHA256

fbeee13767f15c2f71b1d5e8237a00d4633df0850f5883a18786adf5c34c7f7d
SHA512

29e36df1d16d054677fcabec63d46ff1245efec2cc5a694a15437fad16f926f558d9c829509198836a80aa16887048ffa1700f11398a89af633b5bd943b613f7
SSDEEP

12288:fJFtyyPdEmdnAGmJ9dFa9LJgpKjo2cTdsg:f7xEaXmFFtK/cTS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebb1e50bf762a545b087d5f7e5dcb7dd_JaffaCakes118

Files

ebb1e50bf762a545b087d5f7e5dcb7dd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

hjkgy
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE