094ff80d44f63df632737661bbe786c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

094ff80d44f63df632737661bbe786c7_JaffaCakes118
Size

232KB
MD5

094ff80d44f63df632737661bbe786c7
SHA1

ec62e67c3a7b8e73036282deb40c87c3357546fc
SHA256

92be2c092f6ffb945d2009e8975adf99170fe94adfed1f7d823b32532585ce98
SHA512

c9b9c9c5bf7e71ef3942c0777dc73e76a23628fd4863f5bab377d6d868494f84f2005fe0fb8b67111fe497ecd7a65faee1c17367da9daa200908880cdb1101c9
SSDEEP

6144:7NLFCyy5EnrajjLa/MwyyRJMWPdIMfzzj:7NLFCyy5A0jO/MwHd9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
094ff80d44f63df632737661bbe786c7_JaffaCakes118

Files

094ff80d44f63df632737661bbe786c7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

53d48e5f2b02addf344f2f23bc655422

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr71

_iob
malloc
cos
sin
_initterm
fprintf
__CppXcptFilter
_except_handler3
__dllonexit
_onexit
_adjust_fdiv
free

kernel32

DisableThreadLibraryCalls

Exports

Exports

dts_block
dts_blocks_num
dts_dynrng
dts_frame
dts_free
dts_init
dts_samples
dts_syncinfo
getVersion

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE