75b2239d571212f7f6b3067b18d3cd36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75b2239d571212f7f6b3067b18d3cd36_JaffaCakes118
Size

27KB
MD5

75b2239d571212f7f6b3067b18d3cd36
SHA1

3e2ec96266892f58f22d2ce4f7d757e66aa5b038
SHA256

ffb59098553c2b280965e34857958798ea4efa362229bb37e9fe146d787c24f4
SHA512

8a3a0f59d19209b2de1eed8e58a38b88017e8ff581b7cdf88006a86edd88f6b8fcb7cd7e906d8ab7f60cadc19c72bc43182b53a7c2b3a5d2ff59267cd22928be
SSDEEP

768:3KSQquzz0GQgrKbRg1dGIIiZxveYQAgTn:NQquzz0GQa1tl5eRT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75b2239d571212f7f6b3067b18d3cd36_JaffaCakes118

Files

75b2239d571212f7f6b3067b18d3cd36_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn
StartHook

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ