7f2c2b7becf48ae927dc5470d023c0a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f2c2b7becf48ae927dc5470d023c0a1_JaffaCakes118
Size

247KB
MD5

7f2c2b7becf48ae927dc5470d023c0a1
SHA1

eef609029a02fa362c843513cc368fbca00778e0
SHA256

058a623119980beda5e90efb1ca538536745b639a0104d6693d46513adb76b90
SHA512

7285116afee19c7d0312dea6a0a4552f2e0ce117f6e11443867e2ad1012a9abf8b67b78048fd796bfbcfbf7f5b6ac6a79a4a4610df3e1d40361d09ef4cd108f7
SSDEEP

6144:XTo+paD8LTsSZaGpXvOeXp3TeO16KRi8Nw:DNiaTsGmexTtiAw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f2c2b7becf48ae927dc5470d023c0a1_JaffaCakes118

Files

7f2c2b7becf48ae927dc5470d023c0a1_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ADKAppsEntryPoint
ADKAppsGetOfferStatus
ADKAppsInitialize
ADKAppsInitializeOfferWindow
ADKAppsSetOfferAccepted
ADKAppsStartInstallDialog
ADKAppsStartOfferDialog
ADKAppsStopOfferDialog

Sections

.text
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ