961de016eff4f1211e2b883cc455e973_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

961de016eff4f1211e2b883cc455e973_JaffaCakes118
Size

26KB
MD5

961de016eff4f1211e2b883cc455e973
SHA1

a62817c7e5b2f6f3a351c625dd044ea45e635c45
SHA256

563561fd81de0ccf81686ab03071acf8ae44a7b0b91a9d9c34f09c2c4425b289
SHA512

75cd9ac33f65557a75dde72d175180254cf2c6529a474ca4245756c7b9a70cf8d23ee9fc087dfba67460d15026936f595e03e9b04863cef27d6ca32511e7269f
SSDEEP

768:o+IOqTz1wpg+kwbKb3qEReqZOoVpLsD7DN:rQTypVP+aEReqYcA5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
961de016eff4f1211e2b883cc455e973_JaffaCakes118

Files

961de016eff4f1211e2b883cc455e973_JaffaCakes118
.dll windows:6 windows x86 arch:x86

9f78663d91903df2aa9a066345f470e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

avutil-56

av_log

vcruntime140

strchr

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-runtime-l1-1-0

_cexit

Exports

Exports

postproc_configuration
postproc_ffversion
postproc_license
postproc_version
pp_free_context
pp_free_mode
pp_get_context
pp_get_mode_by_name_and_quality
pp_help
pp_postprocess

Sections

.MPRESS1
Size: 21KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE