aa99d66b1f610ca881e2266a1472ab91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa99d66b1f610ca881e2266a1472ab91_JaffaCakes118
Size

33KB
MD5

aa99d66b1f610ca881e2266a1472ab91
SHA1

af63dec0b6cd5c9273237e9c768dfb22f345eb2f
SHA256

9a654f45f9ae304f3812240e9f6853cf104dc46bde6aaf5357574fd8ba9b9678
SHA512

f2690da2a031a4a734b64b48fd03611e4d732b66f93b74d6f80d0df2d9ce01c4d1757f94e1fd6a58a974286d5aa7b6ed24c193aff8bbc653acd86a64739d7ce3
SSDEEP

768:zeZqj1szTFIIb99QQX23oxRmJE35nOWe22EuvcW9U:6Zqj1sXqdl3gRo50P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa99d66b1f610ca881e2266a1472ab91_JaffaCakes118

Files

aa99d66b1f610ca881e2266a1472ab91_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Hookoff
Hookon

Sections

CODE
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ