66c985ab46e122e1a98cd8ac4738c479_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66c985ab46e122e1a98cd8ac4738c479_JaffaCakes118
Size

46KB
MD5

66c985ab46e122e1a98cd8ac4738c479
SHA1

d2552d47ebc10f803577114cd413e296c9bb8704
SHA256

f1266ac1f0a0740fb0ac2ee77559fdf1d480e8e79751eb6f345257bc91edd14f
SHA512

81bd1630f240fb44094d0733892fc11b79cbacf9e708102b082f75a2e39be963c10cbcc73233ddcb47149dc654fe76c0f5f41080a1d1879efa0b255386d8eebb
SSDEEP

768:0ORqkFj9VszmLmUJjAFd+tZ9EHq5N68xN4wpF1SNUzjjOnnDX0Tq2n8C7:fRqOj9VsMmNb+Zp5N9xJr1rzsDX+Rn/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66c985ab46e122e1a98cd8ac4738c479_JaffaCakes118

Files

66c985ab46e122e1a98cd8ac4738c479_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DivxDecode
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
hookoff
hookon

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ