3d4d5289b5c7fee1e1947b5e2ac2707a_JaffaCakes118 | Triage

Sharing

General

Target

3d4d5289b5c7fee1e1947b5e2ac2707a_JaffaCakes118
Size

15KB
MD5

3d4d5289b5c7fee1e1947b5e2ac2707a
SHA1

46987c94649328406e37eba4768b179710148c71
SHA256

3203c60d7b2acad5c590fed9742c6a03dec7ab7b4afa6dd46a7358e4ea55d515
SHA512

17a04f235c64a9bcdeba32b0d5bb4e14e611a635e034fbe845292541ab84016e6ee7b188a18601391d156bb4ae8ddcde36807b82ee417ee0ebfc34e42660aca4
SSDEEP

192:nJ461A/0LiwxqfKD6Vk/gqWhiQ7SH92s2APwdslQjcW1Xg3J:yx0iwxqsRQmH92sPAslAzR8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d4d5289b5c7fee1e1947b5e2ac2707a_JaffaCakes118

Files

3d4d5289b5c7fee1e1947b5e2ac2707a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

RemoveKeyboardHook
SetKeyboardHook

Sections

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 107B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ