fdf16e8496a6c3ba46d6da223413c2ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdf16e8496a6c3ba46d6da223413c2ec_JaffaCakes118
Size

407KB
MD5

fdf16e8496a6c3ba46d6da223413c2ec
SHA1

777a2e4b03f6d1d1f36d944ef7159e15d8a5ad00
SHA256

225a0512ec4ffa41f1e17cea2af46a86d8779e153468d503e2766b993e2b5a24
SHA512

2df3f82a338ee50395dc62779e046159b6051ee42ae044f11e85a343b7f8383f3855325ada10aa1001a643f61238933935f465000fe84ab4570a3d1134f37983
SSDEEP

12288:owagyE3QFV33L5tlHD+aKUX5juPOsw4wE9J:oN8Qf3bljvxXgPO2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdf16e8496a6c3ba46d6da223413c2ec_JaffaCakes118

Files

fdf16e8496a6c3ba46d6da223413c2ec_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

endkeyhook
setkeyhook

Sections

CODE
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ