f40745de688627d1916b075413438ab5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f40745de688627d1916b075413438ab5_JaffaCakes118
Size

37KB
MD5

f40745de688627d1916b075413438ab5
SHA1

e5486e56b1cad6eecd392c0ab1d2ac9074890a20
SHA256

b1272dbaedbcff23704fc12475836dde62e307943ad0586867d733512668494e
SHA512

17db08086c59320c84a33c846486edfb9bc781e351d524abe251de6596e2965edaa2dabfbe1d1004fc59abc4a791b8b91827302c1a6c21536a0d2fcce30cb5aa
SSDEEP

768:2DyUqviQ4suOzwGvI8OgUlLNhvdLdnNBw5F5u:22UqaQiqUlpLtvw5W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f40745de688627d1916b075413438ab5_JaffaCakes118

Files

f40745de688627d1916b075413438ab5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHoo
StopHoo

Sections

CODE
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 87B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ