aeb06b3a0db18d1996acd9a08af89ca7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aeb06b3a0db18d1996acd9a08af89ca7_JaffaCakes118
Size

62KB
MD5

aeb06b3a0db18d1996acd9a08af89ca7
SHA1

e126690c55d6d784610dcbcf0bcd5ee4e6f402a6
SHA256

98a3d38b1cde094030475d53a2d007a11a28f347d72389e403710941cbba3e7c
SHA512

775477ecbe21406350b943a2a4dc79506c74802dc796605e9c23ec7da913e81e7596cf4191a75bf8772a2b7fb0450b54f62c83db7052190991b39a87aa2932e9
SSDEEP

1536:wcqF1QdMTtd8QvLk+diS7YSBGlEES9F19QIDSb:w18MTtdbzkkiz5JHID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aeb06b3a0db18d1996acd9a08af89ca7_JaffaCakes118

Files

aeb06b3a0db18d1996acd9a08af89ca7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Fuckkav
InstallHook

Sections

CODE
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ