fe7b1d72eafd42aa9ee0219dc23cd7e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe7b1d72eafd42aa9ee0219dc23cd7e3_JaffaCakes118
Size

247KB
MD5

fe7b1d72eafd42aa9ee0219dc23cd7e3
SHA1

719cca1121980f2efb3a0fafbef9c5e85d26bf37
SHA256

28d4449c0605c946bdbe1a89be3b0b1e56f046e2b12f0624a9760fc7e17d1334
SHA512

04ecaee7486fa3e4ef0d445b09847b872a9adbcfc18db09f38ad9dffdcf8f66173a594e1df3aad9fb81dfa90b4bc104bf37704f3a2e59dc0e1ed083edc36d186
SSDEEP

6144:6FSSz6s6syxmKAdEUdgv/ozyCKA0rQXs6ai8djtxE:6J2VRxmJEmgHoX0rwj2t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe7b1d72eafd42aa9ee0219dc23cd7e3_JaffaCakes118

Files

fe7b1d72eafd42aa9ee0219dc23cd7e3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ConServerDllInitialization
UserServerDllInitialization
_UserSoundSentry
_UserTestTokenForInteractive

Sections

CODE
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ