fc56c505506de968ccc3fc87afd5d184_JaffaCakes118 | Triage

Sharing

General

Target

fc56c505506de968ccc3fc87afd5d184_JaffaCakes118
Size

119KB
MD5

fc56c505506de968ccc3fc87afd5d184
SHA1

c8b548f4f2ec909aaaaaa0793fc2bfbc91dbadef
SHA256

95addd90a178d052c2d5f0110b665ab753d80e7b49e6c5690224baeb3fba844d
SHA512

6f7258a1c6b4e703def0bb43340a6e44aaf55fd0486af106a6c5dab991e9a77c16c6f49fb24ef113ac7306dcf76f1f5b1b49760a10ae59d82f2840146c7785b9
SSDEEP

1536:BSvAFqwKaLSHX4B+adLCpG7OxAK/L4S3wepYFrK75t:BS4Fqt10+iWpGyiK/L4AryFrK75t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc56c505506de968ccc3fc87afd5d184_JaffaCakes118

Files

fc56c505506de968ccc3fc87afd5d184_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Install
ServiceMain
Unstallx

Sections

CODE
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ