feeeb7b3a52bf108243bf3a412db70bc_JaffaCakes118 | Triage

Sharing

General

Target

feeeb7b3a52bf108243bf3a412db70bc_JaffaCakes118
Size

199KB
MD5

feeeb7b3a52bf108243bf3a412db70bc
SHA1

7e5a04689e76e424eb82193cce7fd323fd889072
SHA256

bf36952c07022cac227b2f4aa1a4e32dd5a6898af4fcee24633f66c5f4ac94ba
SHA512

fef787f1fea4106448afdae5bf729e8bf07d665e3e53de6b44c510f8281f44b1665f6888661fa06353ce04a97b73b4da242e27dab08b8aa256f001dfa27b0428
SSDEEP

3072:NKLTlQVThVCVYMvPpOIzNasx974vkJAAbToDm6OQkRroa9lFXrIu:cLTlNbNasx9QX+Tx6bkakR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feeeb7b3a52bf108243bf3a412db70bc_JaffaCakes118

Files

feeeb7b3a52bf108243bf3a412db70bc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KeyboardProc
UnHook
installhook

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ