421f1da0168fa5b94e70e12ac4949d17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

421f1da0168fa5b94e70e12ac4949d17_JaffaCakes118
Size

614KB
MD5

421f1da0168fa5b94e70e12ac4949d17
SHA1

77f2b36725b5efa4e15143d702ab557b13389002
SHA256

e503df7188ba4ebe268579a87e903cfdd1ede96e1e550a850cb1cc8c39b9eabc
SHA512

de46fc53a62fa44c6ea2e7e8e3b6bccf87375b9dc8147fce1cdc26eb08f8507090a6196a3fc2161ecf64a58b3bc363eb67fcec8bd1ee864a9821ccb965032ea2
SSDEEP

12288:hVSbUaFty+yr+Ts4e3kmYn0YaAs2z3ll20M5SlTro5gEQ2grSh:hNaFty+yr+Ts4e3kmYn0YaAswLRM5GTc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
421f1da0168fa5b94e70e12ac4949d17_JaffaCakes118

Files

421f1da0168fa5b94e70e12ac4949d17_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Install
Launch
ServiceMain
UnInstall

Sections

.text
Size: 461KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 25KB - Virtual size: 510KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.Silvana
Size: 360B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE