41e96b7f0c34c7d24988f6cbae593d4e_JaffaCakes118 | Triage

Sharing

General

Target

41e96b7f0c34c7d24988f6cbae593d4e_JaffaCakes118
Size

140KB
MD5

41e96b7f0c34c7d24988f6cbae593d4e
SHA1

aa24c75a1a06fd85d344b0baab23d8d68059453e
SHA256

1ddc5c57c9dc2ed26c4dd0faba529b606fc8533f4470dc38c3781ea8c70355ab
SHA512

6a28c5e22d1950c66b0a8cb3d1db9eaddd39aa5f8cf1ac3bdb2e8960f95f149d906ca5537613ea902b5c5f4cd9e2cc1a658223f8ea564752937ca8490c53567d
SSDEEP

1536:ciBIdkwPKw1NPmFeYpa4TjhBy/CPkxIC8NqZ3TvkVp0MHWaa8Z9BDY73zyrZ+NPv:hGd5SmWjzy69ivkPBWETBD8yFOP0kAa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41e96b7f0c34c7d24988f6cbae593d4e_JaffaCakes118

Files

41e96b7f0c34c7d24988f6cbae593d4e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

47b95eaa8a92898962a601a6fb44ee48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
free
malloc
_initterm

kernel32

DisableThreadLibraryCalls

Exports

Exports

JGS7DecodeBlock
JGS7DecodeBlockQuery
JGS7DecodeCreate
JGS7DecodeDestroy

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE