fbe9ad1d58bc90b6653c9ff2b951be7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbe9ad1d58bc90b6653c9ff2b951be7e_JaffaCakes118
Size

366KB
MD5

fbe9ad1d58bc90b6653c9ff2b951be7e
SHA1

9a83ca9d64665f7bb4a603e63903f216e55dea1b
SHA256

63161331ed95b6569c02417978425787e20a6ba73df110bcea41280af93d7ac4
SHA512

0c4d250bb9f309ca4a04c3bdc9f5f999c21c894e9e4c7d92ba7dfc6a9d201ddd98751d13596fc36c1afc70c490a8b2cb6ff591f7f7cd49f47b16819bc6946079
SSDEEP

6144:b5EUkck1Uw6TunlPGoaBYjaeVml9xFd+IjDdmiv42LXtOr03HUZ:qnckujCETeQRFd+UdmirdQA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbe9ad1d58bc90b6653c9ff2b951be7e_JaffaCakes118

Files

fbe9ad1d58bc90b6653c9ff2b951be7e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn

Sections

CODE
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ