147965786d8f2d9053ef103ebc0d9297_JaffaCakes118 | Triage

Sharing

General

Target

147965786d8f2d9053ef103ebc0d9297_JaffaCakes118
Size

14KB
MD5

147965786d8f2d9053ef103ebc0d9297
SHA1

fce0a0c64106a395e567cc04d731a5979171fe49
SHA256

3ff2a270e59501e7db065142ce34d7a78802d77b9b34bfd2ae76095245b1c58f
SHA512

8a8a82674b5f20a5acd6bf8979deec304e0536f73cba87baea64679d376f36bb4d434979f5a104955125ceef62626b0ae9b935fa9ad9d1df36e43d5f507c241e
SSDEEP

192:rOaBT5oM4u2U9a57ubqxoZjTUYVJe0JMenowU4HJ1WsT3m:KaBT5JIyqijzewMLwJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
147965786d8f2d9053ef103ebc0d9297_JaffaCakes118

Files

147965786d8f2d9053ef103ebc0d9297_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
modmCallback

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ