17005c5391abd8ff2bccb44084c0dd60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17005c5391abd8ff2bccb44084c0dd60_JaffaCakes118
Size

102KB
MD5

17005c5391abd8ff2bccb44084c0dd60
SHA1

751e04ec1597a5aed9be5aecc57554e3a3677f53
SHA256

424f0154155a291b575f0b519831af2fbdf13b11ee04508b6e31257603d4d181
SHA512

6fa63c8f93d4f4008abf10e5bca898d1de8999f625ae7adbb16d7f591f79013359ff7dcae78954360c7b434c74e42515397195f9c51faa85f52d4a3ded28c2e0
SSDEEP

1536:Cg78qQGtTJDgydtc5oNqlJ153aFukiAIO2VnToIfyFq:DJD+o6JbY4229TBfyFq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17005c5391abd8ff2bccb44084c0dd60_JaffaCakes118

Files

17005c5391abd8ff2bccb44084c0dd60_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ServiceMain

Sections

CODE
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ