ff0ec67f7827aa801a0c5259ca475b53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff0ec67f7827aa801a0c5259ca475b53_JaffaCakes118
Size

86KB
MD5

ff0ec67f7827aa801a0c5259ca475b53
SHA1

e70d59c35b69ee62259e92d8345c1336f7c11558
SHA256

762fc92f905225316338684ff8d257cfc0f1f0c9a97b76d6138ea69acf3f9f0c
SHA512

e02815b578dff2f06d185bb5062bfe4b9bfc638a61139d2dd6b48508b89a0d3c89c7c0a76cceebeb6b741f4a3df5d165d402785958c6a336592dac1ae5963cbd
SSDEEP

1536:BuupV/nTIQXiOobuM03Xx3KEb4goNFKrGK9+07VHwV+ySAt:ppVU0fTd3Xx98gQDt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff0ec67f7827aa801a0c5259ca475b53_JaffaCakes118

Files

ff0ec67f7827aa801a0c5259ca475b53_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMain
DoMainWork
DoService

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Share
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xhs
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE