f53603bf6e7fe7b7f0834139afabc228_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f53603bf6e7fe7b7f0834139afabc228_JaffaCakes118
Size

60KB
MD5

f53603bf6e7fe7b7f0834139afabc228
SHA1

a78dcf9110c8595d79ca4d97d9ad167d7460a87a
SHA256

110a762879eefe2352543378684b97caa363cde10e750d05758495f53bf7cf78
SHA512

a56a2c722c0d21c7e198436243bb0c1df8c7eb4ea3efb2f5f6971336d0e5a2a9c6adfa76c6d415c020921cd56be370a18bfb1e5c332ad227bda19d31a7ed25de
SSDEEP

768:HCHEqA1kiQhs6+IP5ji5GB0E4Muk4ppdBqXE2RGUDzDnCrk6nO6AZydlyJntJ6:ikqA1ZQhpXBeGGEa8njCrkT6AZBbJ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f53603bf6e7fe7b7f0834139afabc228_JaffaCakes118

Files

f53603bf6e7fe7b7f0834139afabc228_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHook
StopHook

Sections

CODE
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ