8afc1c5ee6f526d4b92be4be312db472_JaffaCakes118 | Triage

Sharing

General

Target

8afc1c5ee6f526d4b92be4be312db472_JaffaCakes118
Size

69KB
MD5

8afc1c5ee6f526d4b92be4be312db472
SHA1

2274e30f0f7839066e7ba5f6096b6bc6c93eb6f6
SHA256

08b2b307085fd65da59829b85c6722bf7cd46778d11cd257c82cc651455e5f12
SHA512

0201599f5ff1efbe9cab4e60f41b2041d8cc358bfc46d563e22ec83509d14ebc055624653bfaec9341846cab61a319aa880885d6c924b3b22ddabcb4fa8947a7
SSDEEP

1536:CBkqmQTYAooTu5Drf1TjJmnUQjGsryf8fJbTx:5CY2C1rdgnZisryEflx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8afc1c5ee6f526d4b92be4be312db472_JaffaCakes118

Files

8afc1c5ee6f526d4b92be4be312db472_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookProc
InstallHook

Sections

CODE
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ