2dce5d5986497ef7544986e991530990_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dce5d5986497ef7544986e991530990_JaffaCakes118
Size

7KB
MD5

2dce5d5986497ef7544986e991530990
SHA1

07dd2a98062537b2a15540b561c27b01595cec46
SHA256

05aecc0dcda0bba9ed4091174a3e748e5bff13919558348ccf6f5c4249f067fc
SHA512

678c0fc5632f08914580b19238458778586c574713303b5d12c340bd264e4453cb259def83afc1d86b28ddf7d0c3615f43754ad172bd29a116776580eadb2c08
SSDEEP

96:nP2p4WiJu8aFwiFtih0M/SjMJhJWatV+KWImi5:nO+W0u8/Jh0M8MfJWajlO0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dce5d5986497ef7544986e991530990_JaffaCakes118

Files

2dce5d5986497ef7544986e991530990_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookSil
HookYarat

Sections

CODE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 333B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ