2165f5787d89e22b719c15269200a9de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2165f5787d89e22b719c15269200a9de_JaffaCakes118
Size

56KB
MD5

2165f5787d89e22b719c15269200a9de
SHA1

24b4d27a3704b93835a3986d9b502ab69b794ff7
SHA256

b63cde5ab86c4ca92d932a64214d3506732ccc785b1b9bb9cd8729a1f7fa245b
SHA512

bfefc4a279c7b29b028d934504cb8d92e5cdf594dee3b66c8ce6dbe491765e93600cd46a8276897e875a4481a3ecbf2a5eabdb2dd54b47c6afd3b9889a9920c4
SSDEEP

768:SSsqSQ+whwHrBDDbYVnmDM9zW3r8fit/xLO1oFSyObg2WAffmBD7r+tycolRNdeG:lsqSQ+w8sMKi9O1iSyUE7KHolRbPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2165f5787d89e22b719c15269200a9de_JaffaCakes118

Files

2165f5787d89e22b719c15269200a9de_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

starthook
stophook

Sections

CODE
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ