32310993f84fc94ad0da823c34f30fae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32310993f84fc94ad0da823c34f30fae_JaffaCakes118
Size

39KB
MD5

32310993f84fc94ad0da823c34f30fae
SHA1

52711adc01c470c3732c7107a3b7c05ed501fcd8
SHA256

c1d123d090f43b14f502dca2495c45bfde03b50dcc17dfa3b6f52723ab03d4b4
SHA512

dbcc9dcd54deae6cb43c36620a29c0fb71c9f6cb130a2cdc9e8078c9f668c94294b8c6b5c5ba5543a75b86e1dc2cce4bf601b7a12d9c7b7bb329893465773d93
SSDEEP

768:ly2q/lszhC+5fWk2ivNzxDIR0RCg7oPh1xXGIDFQl64SfoUTiGTQ:E2q/lstCkVA08ZJQoRQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32310993f84fc94ad0da823c34f30fae_JaffaCakes118

Files

32310993f84fc94ad0da823c34f30fae_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InstallALLHook

Sections

CODE
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ