3b56412dc808af05e79e47a640211833_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b56412dc808af05e79e47a640211833_JaffaCakes118
Size

80KB
MD5

3b56412dc808af05e79e47a640211833
SHA1

7b6e30039283a15a6394318f7544f2d6155ea96b
SHA256

9d7141624ea2baf307827e107f1d5f918e0cad885d3d74023b8cbd4369254597
SHA512

008f4afb536a2cb5c7bb10035da4a5d65c9870a6b7137d9e3416fe7944e5f514e519b71adafc3db5ee12bb24e5b0bc369365010a35c3fbd7a038d3f2dc923811
SSDEEP

1536:aOFqUQ2OqzyG5Q+MDePjjTetWODY11S7N0SUYJL9aCBdAHIdAMROYFy:TOqT5Q+MDePj3et5DIS7CSUYJRyIZRO7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b56412dc808af05e79e47a640211833_JaffaCakes118

Files

3b56412dc808af05e79e47a640211833_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn

Sections

CODE
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ