8c8b6439024ed0b21e193647982575fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c8b6439024ed0b21e193647982575fa_JaffaCakes118
Size

1.6MB
MD5

8c8b6439024ed0b21e193647982575fa
SHA1

512898dc6b6318464e44a0f4dd469a32d9af776a
SHA256

4f09c241e46997228155a45626bbd828fe5ee71d6aa63dc4e298ee596b045e82
SHA512

d59318e87ccdde85f708b1cea8fa812d2f2f76b59a70e7afee1c21d1bb88dd7c5acb1a30a13176bc95360f80c004d39087fec994feaf1bf73028cbdf7731ba49
SSDEEP

49152:KC/LAQDWIHpxZcYP2EwekzA73qvbIlpG3:KCzAUFpHlMQikG3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c8b6439024ed0b21e193647982575fa_JaffaCakes118

Files

8c8b6439024ed0b21e193647982575fa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn

Sections

.textbss
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 425B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 86B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ