391eb488ea7ad0c7b0b23fc634f9d2c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

391eb488ea7ad0c7b0b23fc634f9d2c5_JaffaCakes118
Size

9KB
MD5

391eb488ea7ad0c7b0b23fc634f9d2c5
SHA1

6324bec655d7d8ebb485a9e215c7a90919461958
SHA256

56af89543604239050bb2588c00a1bf2641d7154d5c134d2b202a1b828f0511d
SHA512

7a7bc353471a4715a983bcb569ba81ec36f471a0b8b96fe1dac672c467760af888f1cc0c46f1a6c6fee4933b7d2e2e35b99000b42e7f34ab6fcc9f8686f42be3
SSDEEP

96:nPe2xDhCtAH5kwY2x8slSUiX5t8l986a7AfrQENXC/fjcWOkrR6K7YFO:n/xD4tAH6M66t6QyLAdCnjcWOk4K7b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
391eb488ea7ad0c7b0b23fc634f9d2c5_JaffaCakes118

Files

391eb488ea7ad0c7b0b23fc634f9d2c5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

IDLEHookEnd
IDLEHookStart

Sections

CODE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 974B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 99B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ