66fc08473bee39f3f2793d84ce3f8a13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66fc08473bee39f3f2793d84ce3f8a13_JaffaCakes118
Size

7KB
MD5

66fc08473bee39f3f2793d84ce3f8a13
SHA1

19a31ce66c74965e7edba5c98c5e19b1b45f4aac
SHA256

ffd2c0d7466885f526832b9356a77758817c300eb9a4667db70fa03154ce7294
SHA512

d0c8eb435024f3b665c0415c9e5c855b3a097d2c5d61b29dac940decc82e50a791dd0f16c33b0dd868b6f4998ba7de4a9290c3fdcf33c2582dc2b82d849f8287
SSDEEP

96:nPI4WiJu8aFwiFtih01Rl532eJWahK4oDImBxGJSnespxBmjv:ndW0u8/Jh0Dl532eJWao4i/RHmjv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66fc08473bee39f3f2793d84ce3f8a13_JaffaCakes118

Files

66fc08473bee39f3f2793d84ce3f8a13_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CreateHook
DeleteHook

Sections

CODE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 329B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ