ce1251a841a24f0359e0e8cbfa25c68c_JaffaCakes118 | Triage

Sharing

General

Target

ce1251a841a24f0359e0e8cbfa25c68c_JaffaCakes118
Size

35KB
MD5

ce1251a841a24f0359e0e8cbfa25c68c
SHA1

76a2ab273492d5edc2dd3ed0d57378b018115c7d
SHA256

c21a2ffb90b461004ad5a4d44e7169e645f064f6038c3feb8ec67b0152660e99
SHA512

4a3e450e0b543bca1646d51b1be84b90de27fec8a0c9a6a1ad069ecdb5651a9d0926786a30d72bd50dfdd2faf092efc4ab132eef72fac3fc7d634420b18f9647
SSDEEP

768:h5R2KClMBUcvt1JGP8O+9dfz+qta+6oltoRpLKLbDm7:h5R2K3b/JG7+9d9ta+6oltoXunq7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce1251a841a24f0359e0e8cbfa25c68c_JaffaCakes118

Files

ce1251a841a24f0359e0e8cbfa25c68c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

PacketAllocatePacket
PacketCloseAdapter
PacketFreePacket
PacketGetAdapterNames
PacketGetAirPcapHandle
PacketGetDriverVersion
PacketGetNetInfoEx
PacketGetNetType
PacketGetReadEvent
PacketGetStats
PacketGetStatsEx
PacketGetVersion
PacketInitPacket
PacketIsDumpEnded
PacketLibraryVersion
PacketOpenAdapter
PacketReceivePacket
PacketRequest
PacketSendPacket
PacketSendPackets
PacketSetBpf
PacketSetBuff
PacketSetDumpLimits
PacketSetDumpName
PacketSetHwFilter
PacketSetLoopbackBehavior
PacketSetMinToCopy
PacketSetMode
PacketSetNumWrites
PacketSetReadTimeout
PacketSetSnapLen
PacketStopDriver

Sections

.nsp0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE