ef8b44c67836eee9f61d46a355e094fd_JaffaCakes118 | Triage

Sharing

General

Target

ef8b44c67836eee9f61d46a355e094fd_JaffaCakes118
Size

236KB
MD5

ef8b44c67836eee9f61d46a355e094fd
SHA1

621d7601d9cca3280e79e61baca21e5e2a8c1050
SHA256

293a0601e3d8ca43be5c8cbc8bdf2e7ea9a6ce7abe4351b59242e57e2a6879e0
SHA512

755d3d6d5c7ee120c2897324f81c1b058129f12481d11d56cf4605f47605bc2e7128039c79995a9a53698604c2f6fd1bba6cb35585510965cd9c55eac6162f50
SSDEEP

6144:ECYVBwvSdWj7rPQif8Ede0PCO9QM4whL:EBwvLQEde6NQMdB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef8b44c67836eee9f61d46a355e094fd_JaffaCakes118

Files

ef8b44c67836eee9f61d46a355e094fd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CreateJpeg
GetJpegSize
HookOff
HookOn
ScreenShot

Sections

CODE
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ