f9e94ceb7978438b2e4f68cad77ec601_JaffaCakes118 | Triage

Sharing

General

Target

f9e94ceb7978438b2e4f68cad77ec601_JaffaCakes118
Size

124KB
MD5

f9e94ceb7978438b2e4f68cad77ec601
SHA1

9729e5849a3ac00c8c2e8bc6a4f1746e1603a454
SHA256

22b4c938cb2fdd48a1f1ae8bc1f5b1bdc18c2856658c4af1914c32727006f9f8
SHA512

b85d6b54f1400361730ffc4ce271b4a50f3269a95383ec54128de030eceae6be9801ab43a86cc43524f26984ce8c9a6d0086b1d7bf42eec63f80cb4dc3cd0c55
SSDEEP

3072:8yFswNN9uXCr+6wu2h965xd2pknzWfD/bs1O:8eswNNDi6wu2b6/d2gWfD/bs1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9e94ceb7978438b2e4f68cad77ec601_JaffaCakes118

Files

f9e94ceb7978438b2e4f68cad77ec601_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Install
InstallEx
ServerMain
ServiceMain

Sections

CODE
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ