95413942c00f443efcdf840c1b80a305_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95413942c00f443efcdf840c1b80a305_JaffaCakes118
Size

55KB
MD5

95413942c00f443efcdf840c1b80a305
SHA1

5e281483b9056522e56410662ef475da5635aded
SHA256

a818ffe48afed9917370469a827fdb3573aac52174a8b7d4a38983d76065ca58
SHA512

f140bc9dd67b439a7106e75082f56d3c363670bd62cc1c65121d9aefe8c0c3d30157d82ae7eb4614d1eae389d1eb951ecd0a023ba61cf2fbad1a8b88082882b4
SSDEEP

768:guLqxVszv4pBnWGO7S32lEaT3pdyGXE21GRRE8AgzfU6Jexpc1A3wh:LLqxVsYBpOG3pOAvAgTUVpc/h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95413942c00f443efcdf840c1b80a305_JaffaCakes118

Files

95413942c00f443efcdf840c1b80a305_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHook
StopHook

Sections

CODE
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ