8524b797a5d2cb3e3c2e9c03ee1047ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8524b797a5d2cb3e3c2e9c03ee1047ac_JaffaCakes118
Size

192KB
MD5

8524b797a5d2cb3e3c2e9c03ee1047ac
SHA1

1a563dfd4cf91eff6974d37e64bb3bef7b132634
SHA256

9e814ac155bbcbbeda7bc99ca669c13acd3c77b6c14210b7cea22ac823621f37
SHA512

9fb90bab1a4d8cb632b85ec202d5c8689771337bf75d099a3135abd2b9fc3b8ec991e79b1c8c5e73d03398d17d5f88280dc2e8657c1f3183109c06b3fcd0a769
SSDEEP

3072:7sJktXqkaAp78heywCtFUulXZpwGD1et8m4XnmmZwIM6i96s2sV2mFiQrhKfeYT8:NtXqkaa4hzw+ZMt8m4W7grefrYfedkLi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8524b797a5d2cb3e3c2e9c03ee1047ac_JaffaCakes118

Files

8524b797a5d2cb3e3c2e9c03ee1047ac_JaffaCakes118
.dll windows:4 windows x86 arch:x86

786456e4cc602e2ffabe68768b96e727

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
_CIpow
floor
free
malloc
_ftol
ceil
_adjust_fdiv

kernel32

InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection

Exports

Exports

JgatBegin
JgatCreate
JgatDestroy
JgatDup
JgatEnd
JgatProcess
JgatSetOption

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE