022280c8aea529a20d8bff86ebe62539_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

022280c8aea529a20d8bff86ebe62539_JaffaCakes118
Size

513KB
MD5

022280c8aea529a20d8bff86ebe62539
SHA1

0c27b8f856e49ab6f2c75652f7bad3033bfae547
SHA256

9e48f4f06be98c30f525992b0d81a895a5c719d2cd1434da0ebb40df89d463c7
SHA512

26ea68f317f1c98b0e767e2a19ee90ede425d48ca4d9b2f408e2f41eaa31a0901a27fc6465488b2e088db25cc6101da235286f69d0c2fe14f3753d4a2ada0329
SSDEEP

384:TidD9d6GAm2Q0CTwqHIksdua2ZygZtwX/Voe8MjiJeEBAk0vuzEiChPHARiQX:GKjWwq7jgi26IiJ3zEiCZW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
022280c8aea529a20d8bff86ebe62539_JaffaCakes118

Files

022280c8aea529a20d8bff86ebe62539_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindowB

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ