d9a0dcd167cb426f793fc849c18d6be1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9a0dcd167cb426f793fc849c18d6be1_JaffaCakes118
Size

282KB
MD5

d9a0dcd167cb426f793fc849c18d6be1
SHA1

1edac9bbbc52ad954d7a9c61bafcf86e0fd5c896
SHA256

4ba185aae9c219a4967ccbe0b8d44c5594ae54a963e889608e8836574cbbcf0a
SHA512

3a7ac39080489cc7e9da2f4b5f42dbd7d8a91d287a72b7a602b1a7bae0bc12af4ca514770c625a642b644d53d9f9e7902a487b83231284e1b3f5987fa6dcc864
SSDEEP

6144:3UZyvnsotDHFDETyvnsotDHFDETyvnsotDHFDEn:EZCtNETCtNETCtNEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9a0dcd167cb426f793fc849c18d6be1_JaffaCakes118

Files

d9a0dcd167cb426f793fc849c18d6be1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

installHook
uninstallHook

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ