f08c9d6f59ab2418de74afc1f1e1f377_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f08c9d6f59ab2418de74afc1f1e1f377_JaffaCakes118
Size

124KB
MD5

f08c9d6f59ab2418de74afc1f1e1f377
SHA1

76842f2584d4e0093466b1d30a7f0040d09d7c98
SHA256

4cfffd35c04d67bc8c1ca6315d62e54f89d563315fe724218adab29175fc5db6
SHA512

cc9378f25766f6d51a957ef46dc67e210b5daabeaf894f07a12b2d7448e36fffbe12295cf8874cd4e006e022c0d9d3c0973d781162d00b7e1a948277a2d6b76e
SSDEEP

3072:ymHbLOuJcW7wYfht8FkwZOMt5/rrwYoQ4y:N7LBJ/wyQFkwR/r0YoQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f08c9d6f59ab2418de74afc1f1e1f377_JaffaCakes118

Files

f08c9d6f59ab2418de74afc1f1e1f377_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
neishei
n��eishei1

Sections

CODE
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ