62bbf86fbbc1c24dd501c8ec429d1f30_JaffaCakes118 | Triage

Sharing

General

Target

62bbf86fbbc1c24dd501c8ec429d1f30_JaffaCakes118
Size

72KB
MD5

62bbf86fbbc1c24dd501c8ec429d1f30
SHA1

2197e979e12ca882508ffc62e6acb695b80f1489
SHA256

118465e961b9003a0f7517f92eae4fc54c55e4b5ad8539792eda71c61b85996a
SHA512

2929c10a4a868bbff847c37d0793db2c4bfa3ef10332f119b549e2a33bfa596cabd61a6f39c9f59cb628ec6f1a4832d7bd2da1eb6706abcf0636b1ce7b8aa65d
SSDEEP

1536:/LSeqjziajD3oxPl24OJ69CXDs6LF2JB:AWaf3Kd24264Ts6L4JB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62bbf86fbbc1c24dd501c8ec429d1f30_JaffaCakes118

Files

62bbf86fbbc1c24dd501c8ec429d1f30_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d098cfd9ce373f70a5869aa414b56e77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

u32cvt

cvt32DIBToDIBOpt
cvt32DIBToDIB

u32base

buf32DIBMemBufAlloc
buf32DIBBufFree
RGBToBGR
buf32GetMem

kernel32

GlobalLock
GlobalHandle
GlobalUnlock

u32comm

ucGlobalAlloc
ucGlobalFree

msvcrt

malloc
_adjust_fdiv
free
_initterm

Exports

Exports

vcAudioConvert
vcConvert
vcConvert256
vcConvert256Ex
vcCrop

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ