4a1717c4b8e3de66291ad29dfff2a022_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a1717c4b8e3de66291ad29dfff2a022_JaffaCakes118
Size

140KB
MD5

4a1717c4b8e3de66291ad29dfff2a022
SHA1

cf5c12218b8cbc0e623c9a3d5b4399b38dc6730e
SHA256

44d2b9632b61f6467020ce8ae5829d1362ebb80d6cb1ca5a83e4dc86c7d589e9
SHA512

888f2ddca8bc8f7ac879299073b5b771c41512f8d6838e0513fa0ea577fd5dfb8918e1a26b944c7928e678adcff19f0b8ca3fa58f5536d1a398d999f23c6a6f7
SSDEEP

3072:CsgwEvM3z0BQg/S3jSEUl+Welmef2Aze001gCm6+f0Ii7:Csge3wXCQefZCm6+8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a1717c4b8e3de66291ad29dfff2a022_JaffaCakes118

Files

4a1717c4b8e3de66291ad29dfff2a022_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InstallHook
UninstallHook

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ