85550be091d81399808f612e5cce0060_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85550be091d81399808f612e5cce0060_JaffaCakes118
Size

84KB
MD5

85550be091d81399808f612e5cce0060
SHA1

469b1b6934156a0c5bc4d2dd38c2b8153e342188
SHA256

d3288c234248df5b7cb597b074e89bf947a755b623ebc5153e45fcd09c58ddb1
SHA512

fd65f83690d7e01f989ea564d2af89eb054d473af8bccdef0f1dceb72a1b6915c4f0bb6fe8deb871820a84b3bfb5d666b5371f9566b5121d3e09d84032fe9579
SSDEEP

768:PkHFXR58GX2m6ZxWG41CVe+lpWsIl9DHzfwDJ8OJIZi0inuUUUtuaCXt:PmF/8GBUe+b49DzfJA0lDX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85550be091d81399808f612e5cce0060_JaffaCakes118

Files

85550be091d81399808f612e5cce0060_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bb6e4e2f7bdd1c305df01fba5dafa399

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

fprintf
malloc
_errno
free
??3@YAXPAX@Z
_iob
_initterm
_adjust_fdiv
??2@YAPAXI@Z

kernel32

DisableThreadLibraryCalls

Exports

Exports

Decode_Picture
DisposeVideoDecoder
InitVideoDecoder
Initialize_Buffer
Initialize_Sequence
group_of_pictures_header
picture_header
sequence_header

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ