dc62e6bc2d469cbec7459e9f4dd014df_JaffaCakes118 | Triage

Sharing

General

Target

dc62e6bc2d469cbec7459e9f4dd014df_JaffaCakes118
Size

524KB
MD5

dc62e6bc2d469cbec7459e9f4dd014df
SHA1

2ceefaf4e7f611ad1ea31366a78dac5d6c62ab3c
SHA256

48b99420ff4046f5b4c55f149930f34ed327da3af35f728228cd395fb64c8fc2
SHA512

a7c5cbb16e7376cd6397a43f36500a374c433702c21bd3a4799ff0aec44568ad824db584112e338066ffc836fce832d7391e17c9bd28327488b01d3fd2fddb4e
SSDEEP

384:zOr5NKZ2Vx6wP9uSbVehV6z4LESuY8erWUP8tRhnVMvY5EsAZYYk/QW:ar5ZHJaLESuSvPER/5EsA6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc62e6bc2d469cbec7459e9f4dd014df_JaffaCakes118

Files

dc62e6bc2d469cbec7459e9f4dd014df_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ