0f2e89055c0e4b1426c1e40387a066ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f2e89055c0e4b1426c1e40387a066ec_JaffaCakes118
Size

65KB
MD5

0f2e89055c0e4b1426c1e40387a066ec
SHA1

653ca3c17d38886cff2c72a66307d2564eaa5771
SHA256

ccb20d0895915892465723ca56261a4b27919541136e00b0ca6e2cecb1b24d48
SHA512

9c9f47f0e878be5c298f548f3c28f865f6a0af3dc73e4666d19c2864f6af940c096d6ca5baf156c9e00d026d4b977f91e19ceb2a5a38448c1566bb020cc85e0c
SSDEEP

1536:cF5Li4JoQmCZyUyhDkAAbr7jpk1NrZTURv+7BhcHyJbh/k1Nr:iLHY7Qb7a1NgmlhcSFM1N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f2e89055c0e4b1426c1e40387a066ec_JaffaCakes118

Files

0f2e89055c0e4b1426c1e40387a066ec_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InstallHook

Sections

buh
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

arwnfy9
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

n
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE