aded7c240b5c119fd404e7eb2a30f1a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aded7c240b5c119fd404e7eb2a30f1a0_JaffaCakes118
Size

50KB
MD5

aded7c240b5c119fd404e7eb2a30f1a0
SHA1

a5e651e45418f33882adb58235268cf95be19b9a
SHA256

bbd82fc3a5d7216f2084d2ab1db2a4c104b41d2e1114af06389a88af663c1ab8
SHA512

4171527bd5e43ba53f16592caeadce87cf4f503681001653779627bcc95d461076eb7ad3570a677b2728d473c22aef86297b48b7c9a302ddea49d6e1cd1f83f0
SSDEEP

768:eigqUFszT1jua95NHlulIVsanMvsWp6P/mUnyRXSRchIOTethPWaU38r:5gqUFsH4wFdsa5WymUwXkgVehO3k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aded7c240b5c119fd404e7eb2a30f1a0_JaffaCakes118

Files

aded7c240b5c119fd404e7eb2a30f1a0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InstallALLHook

Sections

CODE
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ