f050fc103c386482cdfdd998cda6af2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f050fc103c386482cdfdd998cda6af2f_JaffaCakes118
Size

396KB
MD5

f050fc103c386482cdfdd998cda6af2f
SHA1

73a55c86e8249e79bd0793e978e042756f40e5b0
SHA256

085f94255305416ec9cbf05586ed21ae5526a4153aa3679a94924eb832f70f29
SHA512

68aeb136ffb68fc1007cb7ca4324a478457b34ccc785b19a824029a496c6d313ff93f9a129aa61828eb24105dd0c999003721b4f9cd4a0e9036b93115d1564bc
SSDEEP

6144:06cPpODxCdS7eOUQ41KcJijBPhY3FVkcVonZfr8M0TP8Rf6Z9uZM1IJDZ+9uH:0VcCStBG3FVtoZfYDTER5AIFZ+9uH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f050fc103c386482cdfdd998cda6af2f_JaffaCakes118

Files

f050fc103c386482cdfdd998cda6af2f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Qy001DoMainWssk
Qy001Service
ServiceMain

Sections

.textbss
Size: - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 388KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 812B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 128B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ