0a578cc576e2be5962b2004dc5207938_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a578cc576e2be5962b2004dc5207938_JaffaCakes118
Size

3KB
MD5

0a578cc576e2be5962b2004dc5207938
SHA1

f43f247f31fce52ce08680d368f90d4ff8ba2807
SHA256

c67bd4f0ec369279f617532f6057f57853b33c2f6f26fca6b6fe313ee59437bb
SHA512

671a80d6fed5235b0e6a0fabc737b71f6d6256d1ac8680abe491dce03913b90d8c7d83ae8e09978584c5a272b6c2c86874933c5d5cd315477cd704a2bfae5d60

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a578cc576e2be5962b2004dc5207938_JaffaCakes118

Files

0a578cc576e2be5962b2004dc5207938_JaffaCakes118
.dll windows:4 windows x86 arch:x86

18126da8ffb93b1b857f6550432e684e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SendMessageA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx

Exports

Exports

InstallHook
KeyboardProc
UninstallHook

Sections

.text
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 297B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ