49e3dce0d3195b46a81ba8c545b542e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49e3dce0d3195b46a81ba8c545b542e0_JaffaCakes118
Size

400KB
MD5

49e3dce0d3195b46a81ba8c545b542e0
SHA1

b209bd0a3533532a4cfdbc232797facefccab21c
SHA256

7842aaac12007cfebb4709554ed9c6052b616a02e0eb3881c5d9318ea58b4f4d
SHA512

8066239e7e14486c1075778a6da9e1250554f12ec05411be75541eab95b188de0ed8d0bb54da007d9867789137f56acf7df00ee6770c33f9ed3d0ae35d8b8b23
SSDEEP

12288:Qi/o61sZGjy9Lx7KrYcJycfqc98YWI5jG:QYo61smy5x7rcJ/qWLS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49e3dce0d3195b46a81ba8c545b542e0_JaffaCakes118

Files

49e3dce0d3195b46a81ba8c545b542e0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

@$xp$14Mcistr@sMciStr
@@Unit2@Finalize
@@Unit2@Initialize
@@Unit3@Finalize
@@Unit3@Initialize
@Mcistr@Finalization$qqrv
@Mcistr@initialization$qqrv
@Mcistr@sMciStr@
@Mcistr@sMciStr@CloseMCI$qqrp17System@TMetaClassxui
@Mcistr@sMciStr@PlayMCI$qqrp17System@TMetaClasspxc
@Mcistr@sMciStr@SendMCIStr$qqrp17System@TMetaClasspxc
_GD
_StatMessage
___CPPdebugHook

Sections

Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 399KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE