15afd5bfe79865ffb38c45b0e66e6541_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15afd5bfe79865ffb38c45b0e66e6541_JaffaCakes118
Size

146KB
MD5

15afd5bfe79865ffb38c45b0e66e6541
SHA1

0565c49886b5f38de1411b317259189a02e546d5
SHA256

e3f5c2801665e3edc9c4a4d8ba35579e1bd64cb220f94301156d4958b32faf4b
SHA512

4d343932c7f75650379a12453e1bf1b5ac31d40f55c3cd8fbb81b5b584b9feff58476a6809e48230a15342a43b5faf0a8ca45a9cd0cc8780334122e72b5f088d
SSDEEP

3072:57R3sExOxwAaYXuuEWNhKum/G7YJKmaW/ZRNAK4M:57R3sYOqAaYXP/hKu77Yd/ZRN3L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15afd5bfe79865ffb38c45b0e66e6541_JaffaCakes118

Files

15afd5bfe79865ffb38c45b0e66e6541_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DoMainService
MainService
MainWork
ServiceMain

Sections

CODE
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

fuck
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE