af4aac18f9ed4f0869b9ae9ebaf7d28d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af4aac18f9ed4f0869b9ae9ebaf7d28d_JaffaCakes118
Size

50KB
MD5

af4aac18f9ed4f0869b9ae9ebaf7d28d
SHA1

2641aef35dc5ed70af1e9564e8bc1f627b0abe1a
SHA256

f3bcf2d9a89f7af317e0d44d595e9ca45417d8e4242ce43839da6f22192f4c76
SHA512

ceb62a48b2f737dd5c6defc522089c978c765d0cc075cbb48164c28bd361a6df310b64ad4a1a54265712fa06c792ee6a57265cd0bbddc69e239e761a74678c7b
SSDEEP

768:t3niJqLQbLyBwSheSFIWre97mbv7pAar2JxJqbKvfI3sCri4ytKwM34FI76G8xQf:t3iJqLQf2mWE8v7oFfpCSkZ3QXxu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af4aac18f9ed4f0869b9ae9ebaf7d28d_JaffaCakes118

Files

af4aac18f9ed4f0869b9ae9ebaf7d28d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookProc
InstallHook

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ