32fa89f1119548560e080c991723ea17_JaffaCakes118 | Triage

Sharing

General

Target

32fa89f1119548560e080c991723ea17_JaffaCakes118
Size

16KB
MD5

32fa89f1119548560e080c991723ea17
SHA1

0bdb1593e6924c3e571258fabab28d313ff0de7c
SHA256

14db694c9157d1a0e0f5b4a254d49e54d592dae4a97ce9545360521810fcb7e6
SHA512

667fbb4bea82b814a71d1ef92329d00ee2500d3930626bc05a25ddac4cf700f3953e5a31640e1033ca4ad581e5c73a4d08642686b06b76b1da4d8bb5557727bd
SSDEEP

384:LckeZSqE1CS/1sz/9quHSim2PMXYDzaEh:DeZSqzS/1sz/4uU2Z/H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32fa89f1119548560e080c991723ea17_JaffaCakes118

Files

32fa89f1119548560e080c991723ea17_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HidePortAdd
HidePortExist
HidePortRemove
HidePortTest

Sections

CODE
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 986B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ