8931b30c4c77c734244ffebae993eb89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8931b30c4c77c734244ffebae993eb89_JaffaCakes118
Size

3KB
MD5

8931b30c4c77c734244ffebae993eb89
SHA1

25f56759e52ab5076a3b582835de466d02b8c46f
SHA256

52dd0ee8e0eee8a18426acf84e86bb356f122f026a5789dccde927325343081a
SHA512

fceb26e62ec85e6960eaa94509dc45b46844da31041452878f09a19828e859058312a447780aaba99aefa440c48e645ce10906ae890301af61518d8ca8af71c1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8931b30c4c77c734244ffebae993eb89_JaffaCakes118

Files

8931b30c4c77c734244ffebae993eb89_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1447cc1a27e3e5e0c6332b8334518e8a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetFocus
GetKeyboardLayout
GetWindowThreadProcessId
PostMessageA
SetWindowsHookExA
CallNextHookEx

Exports

Exports

Back_DDE
HookID
LngID

Sections

.text
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ