2b95062300d3e174752fb14b80a4b660_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b95062300d3e174752fb14b80a4b660_JaffaCakes118
Size

87KB
MD5

2b95062300d3e174752fb14b80a4b660
SHA1

99f859c3c48c6ef03812539a9b146abe754a08bb
SHA256

baff6e1dab0c489ee9d0fdde426d99ce8c2d40a83f02583dcb65fd2fda44d194
SHA512

88cbabc4d4c6c7b8b7c221fd52dbb89fbc4ee2327d2e4966ce5f64eb3325427b7f0fb6441c243e1841479d1381daad88973bfdd4d08c7d66db0d04a212154b8d
SSDEEP

1536:9jqjoQ3Qa9bYR0Zz2uaw91iexlsQ610thS7AYqPa8o0mT3BNpZjVL9m:AoROMAzRaq1iexls510PS7AYqS8oLRNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b95062300d3e174752fb14b80a4b660_JaffaCakes118

Files

2b95062300d3e174752fb14b80a4b660_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EndHook
StartHook

Sections

CODE
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ