ef8fda34d3d8f72e0a66c95b5358b072_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef8fda34d3d8f72e0a66c95b5358b072_JaffaCakes118
Size

339KB
MD5

ef8fda34d3d8f72e0a66c95b5358b072
SHA1

81c1c3d22a150d7be35054b85653e04e04b13ec6
SHA256

497cfb9bc07bdf4ad123889cae7e83dceec9b326d11a7f4dacc3719164f3f433
SHA512

52612cf93c05e16d88423998cce529187fa7c73fa10a543d6609a619ce64e8399902bdc739689307b3dcfb900516adc338d627033ebcf34583fa4f958d938cc0
SSDEEP

6144:x/ojWf4jBe2lTH2DEoO+Zz5PfXDmoaSYUKdhGE0MhFzn4t0TB2l:aw4jBe2lTuE6Z92UUIOhFD4t0T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef8fda34d3d8f72e0a66c95b5358b072_JaffaCakes118

Files

ef8fda34d3d8f72e0a66c95b5358b072_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ