00b0fada64e58161f72162b91d254e94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00b0fada64e58161f72162b91d254e94_JaffaCakes118
Size

64KB
MD5

00b0fada64e58161f72162b91d254e94
SHA1

142cdcc514ecab48d02cd715e0b7f462b7d41616
SHA256

a9125939e14df758bc3d25f49659c8f9af56977bbd58edb5d9ce57e62b4af3ba
SHA512

033c3417a011abf005a375ea4922cf3bd273b60fd781ca14c641e354daca9438b8dbe80f566b213b71723b49cde8cdac3212783795261b51d919b7d4cc0ed73d
SSDEEP

1536:AJTaOTQ1voT8tTD5MNaIx0hasL+EoWaTj4y7rKvuvV:dzO2Tsaewa0gjBrKvuvV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00b0fada64e58161f72162b91d254e94_JaffaCakes118

Files

00b0fada64e58161f72162b91d254e94_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Activate
AddLink
Decrement
GetAdvMessage
GetInfoMessage
GetParams
GetState
GetStateMessage
GetStatus
Increment
IsTradeTime
LinksBegin
LinksEnd
Quantity
s1_Buy
s1_Init
s1_Sell
s1_SetRules
s2_Buy
s2_Init
s2_Sell
s2_SetRules

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cod0
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cod1
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ