5fef065e6b7ae38bca9eb66c83c3d89a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fef065e6b7ae38bca9eb66c83c3d89a_JaffaCakes118
Size

51KB
MD5

5fef065e6b7ae38bca9eb66c83c3d89a
SHA1

c2b75e38e474c9551e3954c0c19e7f8ec6cbe396
SHA256

593352d564b417318cec13439dc5682c98b29b1b34b3ddc350c59084c4863ba0
SHA512

6a3f1860e10e6a6cf74afe982e71890c14d5449a1b44de81bf51ba2a940ba40b1f98b0ba09436bdf83f3eb229db4addc5a69f4a294d6ee58658cc1f1ca8c7344
SSDEEP

768:tiwqmQLVmKy2oY8nrfZgcQ/QXH3N/fNfnPOMp47ZoLWHyEn+jyrycrkq:cwqmQhmtvY8nr6/YXqmWBHucr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fef065e6b7ae38bca9eb66c83c3d89a_JaffaCakes118

Files

5fef065e6b7ae38bca9eb66c83c3d89a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InstallHook

Sections

CODE
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ