01a50cf5d28a51f12a5ac543d0d746cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01a50cf5d28a51f12a5ac543d0d746cd_JaffaCakes118
Size

145KB
MD5

01a50cf5d28a51f12a5ac543d0d746cd
SHA1

ae2d6a72fbfb7f7c933656a7b319060f6467f8d6
SHA256

e0518c541cb18ce0b4446aa6912a2d574d99834d07b1b831284b1312cce61e25
SHA512

67621c506fe436445cf3e1cc30d46886f43d0dcf7c4467ef7a1715328ebef1ea00e46ede678fa971520b2b80cb4916d89709ed4019f5c7b5958590c1e3bbfeae
SSDEEP

3072:IOI5OkS+ew8gZ9tq6BK84Sj8lFNPA50rq/O0buJRel9:IOI5Oz+FZnq6BKAj8lFJA50W/O0bERy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01a50cf5d28a51f12a5ac543d0d746cd_JaffaCakes118

Files

01a50cf5d28a51f12a5ac543d0d746cd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DoMainService
MainService
MainWork
ServiceMain

Sections

CODE
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ