00766467b7ff3df1ec43541bfaeb19cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00766467b7ff3df1ec43541bfaeb19cb_JaffaCakes118
Size

512KB
MD5

00766467b7ff3df1ec43541bfaeb19cb
SHA1

9f910d30527927eca0bc5bb4299944c3392c4c47
SHA256

f4eca42c163f979a435a825319427f289f63a5fb7cbf28ed007a9b9e56e618bd
SHA512

79a4cdbf18ff229d13bbd0c674876610d0de48dde8facf3c8ed53afc539a311fa682159cfc847d1aded43217c3ec7524fdd2cc4b31d8a193df01fbaea40ace02
SSDEEP

384:dOr5NKZ2VUI1KmP/HBPtpa5acYTgYPGwVjfGHhEzS4z0rrYYOaI:kr5sWKMtpa5aDTwUfGH+SY0rju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00766467b7ff3df1ec43541bfaeb19cb_JaffaCakes118

Files

00766467b7ff3df1ec43541bfaeb19cb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindowA

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ