85305ee0c6fdb08d0faccf16b6e58727_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85305ee0c6fdb08d0faccf16b6e58727_JaffaCakes118
Size

152KB
MD5

85305ee0c6fdb08d0faccf16b6e58727
SHA1

e2cf2b8980387c0ab9d19f95af0564c8c774eb00
SHA256

aea11da1dca791a5ab63ba7f9fcd212d2908f36e79f4be08f1f8fc014dec3462
SHA512

1f0a57b9c0a2d1b3634c16091d20e4758c03d98a84957e54a16a6b31e8e4a99c553c2f647e5f701c57db410a953a2a832184571ac992675a053da27593f0aea3
SSDEEP

3072:L61Ye3TaEu2CoCcn3zO7A4D8XRZT7v+kPLY2APzVT1GgvwL7:2Ta12CoCckAe8BZnvtPLrsy4o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85305ee0c6fdb08d0faccf16b6e58727_JaffaCakes118

Files

85305ee0c6fdb08d0faccf16b6e58727_JaffaCakes118
.dll windows:4 windows x86 arch:x86

346d60e37a38da26b7d234c6530424cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
_adjust_fdiv
malloc
memmove
free

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
SetErrorMode
LoadLibraryA
GetProcAddress

Exports

Exports

JgedCreate
JgedDestroy
JgedDisableComponent
JgedDuplicate
JgedEnableComponent
JgedProcess
JgedSetOption
JgedStart

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE