b519d9211cbaf4ad1103dd106ed9b730_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b519d9211cbaf4ad1103dd106ed9b730_JaffaCakes118
Size

44KB
MD5

b519d9211cbaf4ad1103dd106ed9b730
SHA1

d3f219163321c585c4d874725d72c853a4c68b30
SHA256

d0e2b4d7092483c54a3e02eb60aa175f09b1dec73fbcd9f2d77bf1814a812cf8
SHA512

aa9843704c68d3ded5ab7260ba4e17547d82cae9ac95dc4b4bbe51d1c7fd2a0b58334ad0c74800861c6acf9d88b23465ac4db4f7b873066a1be9c642d23db19e
SSDEEP

768:4C5qNQ0wPIt8RyUIgWLF6F+Y9ejGfsz4ZoOkuAE4otm1rez78x:/5qNQ6toRhWREkj+oio1reMx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b519d9211cbaf4ad1103dd106ed9b730_JaffaCakes118

Files

b519d9211cbaf4ad1103dd106ed9b730_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

JumpHookOff
JumpHookOn

Sections

CODE
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ