c903cccbc6c2ca21a8a54b6fcd3d5a8a_JaffaCakes118 | Triage

Sharing

General

Target

c903cccbc6c2ca21a8a54b6fcd3d5a8a_JaffaCakes118
Size

48KB
MD5

c903cccbc6c2ca21a8a54b6fcd3d5a8a
SHA1

7cbebf314482dec3718406caf9f91e6e3f6e27b9
SHA256

a9f66c8db2c2d794a7dfa2a5e4662668251f1cfb0f3d81121b53f1c4629454b4
SHA512

2d8324896106a564283d6f7afcc39d1148553c5cdeef012910b296f1d647f8a05123b29ad6fad9ba2d2dda97fad5592c2f7b606cd2c7b33e359727dd3eddc3bb
SSDEEP

768:4SDMqQtIaQ2iKdRkrRZFmQKGQpUK8d6oRvRHS1BHIpy0Qw6j5sUcG72rxjm:PDMqaIaQyHk7QB2zRvF46p9Qdsk7M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c903cccbc6c2ca21a8a54b6fcd3d5a8a_JaffaCakes118

Files

c903cccbc6c2ca21a8a54b6fcd3d5a8a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InstallHook

Sections

CODE
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ