cf6cae05bdfc36b7e3d59b5fadd7aee1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf6cae05bdfc36b7e3d59b5fadd7aee1_JaffaCakes118
Size

783KB
MD5

cf6cae05bdfc36b7e3d59b5fadd7aee1
SHA1

2381452e9eb7b853605e8b2fdba979a1a6869bb5
SHA256

a19fe4b9c724b4f60bfea78ebb395b6e20d04fbdde48818734909769eb441176
SHA512

cdd1468c7404021f931a07eba1cb73b601b0fe1614d872462c4d941793002ab61286ed3634437584a146eccdef1f48a1b650a31bd2d8423a5934eb7376936198
SSDEEP

12288:4AXMRqyMDpzyqdBYigKSViSVc05dVcqcnR4vpJWmxmTgRNCdj:RKIuqb4HDgfWvHnmTMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf6cae05bdfc36b7e3d59b5fadd7aee1_JaffaCakes118

Files

cf6cae05bdfc36b7e3d59b5fadd7aee1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InsertHookOn

Sections

CODE
Size: 673KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ