14f36bb07640310b7e5a25260a22939f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14f36bb07640310b7e5a25260a22939f_JaffaCakes118
Size

124KB
MD5

14f36bb07640310b7e5a25260a22939f
SHA1

4efcadaa0d1f0854f06628886eb1604a3bdb00bd
SHA256

de6774b23768978f2395ee651307159eea6f9d07e92c7c1cd0eed599bc9a1600
SHA512

f6ca1be497e0fd9c134283cc2b6fd78e03e9ebf17ebc51f9444cb64da25e942cf0d6dca71d8e0b4e3a73ad06cce76656bc6220c92bb33c5f183f7cec0c43780a
SSDEEP

3072:vyFswNN9uXCr+awu2hU66xdwpkIoWfd/bsfO:veswNNDiawu2C6mdwOWfd/bsf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14f36bb07640310b7e5a25260a22939f_JaffaCakes118

Files

14f36bb07640310b7e5a25260a22939f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InstallEx
Install
ServiceMain
ServerMain

Sections

CODE
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ