fb1abc6e70b0efd4e63e26e389e30a15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb1abc6e70b0efd4e63e26e389e30a15_JaffaCakes118
Size

35KB
MD5

fb1abc6e70b0efd4e63e26e389e30a15
SHA1

478af59b0debede7202c77ddf47cab4c23fc7dc2
SHA256

f984f47c37d1045aa5426a32c600dfcd6dc23c48d3b29823f60bf6a1d9a9b40e
SHA512

607e5443d8de033e42a8c290f8776da2b629028c48d7436c9352c67b1ffc5d2113008b2acba790236950417d1715a926a45d3d5eae4b79deb0e7872d1806f9ce
SSDEEP

768:xrDUxe436ZAMZXHG6ypR5Hrjp2wEQIFjx:xrYx93OmfR5HrFXIFjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb1abc6e70b0efd4e63e26e389e30a15_JaffaCakes118

Files

fb1abc6e70b0efd4e63e26e389e30a15_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain
r

Sections

CODE
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 961B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ