03e873af115a685837d203aa436c0478_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03e873af115a685837d203aa436c0478_JaffaCakes118
Size

523KB
MD5

03e873af115a685837d203aa436c0478
SHA1

5858c3b463cb8260254b9eb3a9ff0491704bbde0
SHA256

67ff69794254f402a1c21e976394715801b90c71fdd1c72651e866c19f7a159d
SHA512

a85f2d0eae3fcad7af41859433136581ae8faae66aa7cc0062b2bb3bd75f1ccc4bb2060a9c714d33f26082d953e6e5c43892c15ffb5811683e986d430b77a9c6
SSDEEP

384:nyVlNjtU2ecXSdpn59r0uqjuN7LRLnD7dUpKfJIzU/2akF+Jy4:yVlDSjpUuLjD7Wo2i2akA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03e873af115a685837d203aa436c0478_JaffaCakes118

Files

03e873af115a685837d203aa436c0478_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnAHookAWindow

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ