51f850f3fff43b796a9cb1c4fc141f1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51f850f3fff43b796a9cb1c4fc141f1f_JaffaCakes118
Size

98KB
MD5

51f850f3fff43b796a9cb1c4fc141f1f
SHA1

102535ce105bdd35bf26d9d0025ca1772efdc819
SHA256

7ddd2ed687872d939a12abb43e3f370502d1f7922161a66d8f5472a857552ec0
SHA512

09998de1f87ca5de8c91fd0c977321eec06eea2b828bfd86a761e6a822c799e64d03a5c0b9d204a4647071add3ef744d5a5797c4a7f0feda2cd6e427b696221c
SSDEEP

1536:3urMZxWp9z7Sg9X2Ovn43Z7z+437QBVOOj/TDsG6XjrUQ:3UMLWp9yavEjcBVOOj/TDsG6XH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51f850f3fff43b796a9cb1c4fc141f1f_JaffaCakes118

Files

51f850f3fff43b796a9cb1c4fc141f1f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

RunSetupA
RunSetupW
ServiceMain

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ