00b166a7af6230481d202307eb353522_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00b166a7af6230481d202307eb353522_JaffaCakes118
Size

20KB
MD5

00b166a7af6230481d202307eb353522
SHA1

20ec9ef2cce3ea7d8ae6dad090879168fd6a5890
SHA256

69a6ea9486857c26f1e157ffc7dc47da82563111897d6756245b253c0693f153
SHA512

c2969734d0b8006598efdf3d21381a18f44d6ef66580a5d3865d49c9cbed7590c2e0e0b8b81691823c55a892c214df793c6a48d2d2061f8c6edfe65552c65a22
SSDEEP

384:V7ys+FSrHqx2EvirQ737irVdQGz8mO3goOc/fVXuaqdgek:VYFwq4Evik73mrVa2ofVrqdg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00b166a7af6230481d202307eb353522_JaffaCakes118

Files

00b166a7af6230481d202307eb353522_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HideProcess
ShowProcess

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ