c919d3495a3bef363e0fdd067ccabaf4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c919d3495a3bef363e0fdd067ccabaf4_JaffaCakes118
Size

51KB
MD5

c919d3495a3bef363e0fdd067ccabaf4
SHA1

38bfa8b360dda2fdb33a454e3cc880fe47b93f50
SHA256

a8471aaf96a08ed48b7ba293a4a1e3f56b48c1e5d8528e256108607cf32cae83
SHA512

7d6e4b38ece788173af2970a9a86cefbfe65999dfa005ac2bcc9f2044343ecff86a08b9664634a9c3383a2dbf64a3e43ff09f7b65d493ee0b7e504457c364765
SSDEEP

768:SmXIUjRajmncwFFiIDyFNJOVySWEc/cNIJ7ngbgX0wgSNa4h5r2WmLG:AcRFcukI8mWElNQMbU5NF5rdmL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c919d3495a3bef363e0fdd067ccabaf4_JaffaCakes118

Files

c919d3495a3bef363e0fdd067ccabaf4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InstallHook

Sections

.[CCG0]
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.[CCG1]
Size: 26KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.[CCG2]
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.[CCG3]
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ