296cec550bb0278c3fb585b550848ae7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

296cec550bb0278c3fb585b550848ae7_JaffaCakes118
Size

29KB
MD5

296cec550bb0278c3fb585b550848ae7
SHA1

c2135830030ea04f4c54e7f906634fc7d226fe35
SHA256

22c1ca898184f14de5b6e1167bc61432cc40f646b1a8176ce070f53a63aa4894
SHA512

6f7f5ecd46c05b7f0326c0d76cbb371677224590354dcc6ea15947ac2d7a48a3734016260ea1e3533810d1fcb3da618b6ae090b8c8c69fb065c0378151d6ece3
SSDEEP

768:5BOOdkqy3VszIbeOREzYbS8dVBySrUFjYpp1skE:5UxqCVsQaES8Rh4FjY2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
296cec550bb0278c3fb585b550848ae7_JaffaCakes118

Files

296cec550bb0278c3fb585b550848ae7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Hookoff
Hookon

Sections

CODE
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ