45360b39f60db24bb437bfc6198fb7ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45360b39f60db24bb437bfc6198fb7ba_JaffaCakes118
Size

61KB
MD5

45360b39f60db24bb437bfc6198fb7ba
SHA1

a37d0aaaa13b74ea734a0dd3e62b22284b2064e2
SHA256

021cacf86c9cc1c3b2b8c49375dc8ae07540d7811e14a3c4e826996e964c3fa6
SHA512

77ae216be7a2f0b302300ad3032f32ee5227829d98381ba674f5ba9ba747f28e0544d782772d5f1c89afb635164e817d1d9a592951bf9584373d3bd43fc360f9
SSDEEP

1536:FAq2rFsnLUJ6t3hTcGSkHFS9mozrxK/X8E8:QrFsAcbvsooxK/38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45360b39f60db24bb437bfc6198fb7ba_JaffaCakes118

Files

45360b39f60db24bb437bfc6198fb7ba_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

InstallALLHook

Sections

CODE
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ