f59eac64894595f8d5534ad01ece6644_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f59eac64894595f8d5534ad01ece6644_JaffaCakes118
Size

124KB
MD5

f59eac64894595f8d5534ad01ece6644
SHA1

7fa2b59bc02673548f338c3cfd1d9db02794ec5a
SHA256

5531d1cf8618c17df8de763262dbb54dc0fa31fd378e1d64ff8e4d2e7d5e1892
SHA512

817a02eaf303a76f76d4cd1e0d7a513a0aeebf3e201b63d21f643e4ff2f1048b5bfca39e9714092a91ac32ddc7a1827fdc0d9f1f67796e5cba1ccdd78da9ad75
SSDEEP

3072:pyFswNN9uXCr+awu2hU65xd2pkIjWff/b4VO:peswNNDiawu2C6/d2hWff/b4V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f59eac64894595f8d5534ad01ece6644_JaffaCakes118

Files

f59eac64894595f8d5534ad01ece6644_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Install
InstallEx
ServerMain
ServiceMain

Sections

CODE
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ