4a50529a41828c09f1995e26c9fb5bb3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a50529a41828c09f1995e26c9fb5bb3_JaffaCakes118
Size

18KB
MD5

4a50529a41828c09f1995e26c9fb5bb3
SHA1

28b271127b13363bf54698d1b0af3a594746b76e
SHA256

5eee7f2359fa1a99256687b7d6acdf870bbe57d4347a8da42f068a2b9d217f66
SHA512

174495c048d26e1f7d72e4ba45c0c57b1aab6b9747e9cfd8606f657555d6ffb167047f211f9e74b2def1e51d05629d79e3403c12001ed21021d3fdee48e26508
SSDEEP

384:sm96zMVLcIrpg57EQMaOgk5xNBArjDO1UF577tCzEnDYYOnfQ:hkQYCcZ7UxcXMUEEnbCI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a50529a41828c09f1995e26c9fb5bb3_JaffaCakes118

Files

4a50529a41828c09f1995e26c9fb5bb3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
S45pFireWf4l
UnHookWindow

Sections

CODE
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ