64faa1b2a9ffdd41e259b7d80545e9b3_JaffaCakes118 | Triage

Sharing

General

Target

64faa1b2a9ffdd41e259b7d80545e9b3_JaffaCakes118
Size

31KB
MD5

64faa1b2a9ffdd41e259b7d80545e9b3
SHA1

6738d43736d4034a68960b2c6d38b7d63709453f
SHA256

92893714884ff891badc4a83b53159664286b82301ee63ad96fcf5ae98fa83f7
SHA512

8ff8982de9729d58e45c5791c6b2f164579ab32af84f1a21b27de633b190850c5bc24de68624e68bb287eaac8793280262d1a8345753b821201c6ab5dfae75ba
SSDEEP

384:bZec7DMG5LksqD6Ur2kyQsAv7j1XiOxIb6teiDKHrlmK/TTdhpmTKE68veTeK9Td:bhD1L11/QHv9iOize6rRbTdjmrvAD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64faa1b2a9ffdd41e259b7d80545e9b3_JaffaCakes118

Files

64faa1b2a9ffdd41e259b7d80545e9b3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

SetMyHook
UnMyHook
jksHook
jtzHook

Sections

CODE
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ