a63aed11bce141dacc8c3a47a4635190_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a63aed11bce141dacc8c3a47a4635190_JaffaCakes118
Size

545KB
MD5

a63aed11bce141dacc8c3a47a4635190
SHA1

afa03dbc25a6d6b3755f36f9765e05bbc8ba8911
SHA256

1579c830c4c4e6edd809f5c1d0a65189c3d37f0e21e729c81e23bcfa9c8ce5fa
SHA512

9353373253c2b8593c49244a72d44863f54339e3b613e8ad99d555aed98b9932073d590c40ff22af6c1de8d925401628b566430b1255b9bce3000fb2cfc8d25c
SSDEEP

6144:yGPmRkWgw6fQjpu98gI4GnI26pIn7ADjCax2kCdXVE+sUXq765xjI+e7M/06mBbi:vmRkWgwjUzInUD59IXq7gI+eQ/06mdg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a63aed11bce141dacc8c3a47a4635190_JaffaCakes118

Files

a63aed11bce141dacc8c3a47a4635190_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn

Sections

CODE
Size: 459KB - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ