544ff3285210f838a22035d9ebe5bff1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

544ff3285210f838a22035d9ebe5bff1_JaffaCakes118
Size

357KB
MD5

544ff3285210f838a22035d9ebe5bff1
SHA1

02fd5cc6dd2b5f902f89d46b665dfdb0c15d56b0
SHA256

f0b79f53d9e588a804bdd8fa79b791b23dc634306dd42acc8512399c690bf148
SHA512

be6cfccf35ac6225e106f8f93fd4bc58100d169501b737ac9a554b1787814bd85c76cdd0d53a5c38ac52c92c9e139b18663a689d7907328529320ff764942bfd
SSDEEP

6144:xnqPtvTROZiERhYeM0UCxVZ6yyLiSNVyDEjkBVUXaRSfYH2CpnzNpi9ZE7W4fF0t:xqlvYi/eM0pjyLHNV0EjkbUXaDHnnpCB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
544ff3285210f838a22035d9ebe5bff1_JaffaCakes118

Files

544ff3285210f838a22035d9ebe5bff1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ServiceMaia
asdfwe
ewyhfgv
opwie

Sections

.textbss
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 350KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 329B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 124B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ