8ce142811cb420d40a909b6a5d8470b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ce142811cb420d40a909b6a5d8470b2_JaffaCakes118
Size

36KB
MD5

8ce142811cb420d40a909b6a5d8470b2
SHA1

bb7b6a8298d461d9178a641359a5051c1534675c
SHA256

971663011b4ff60da95a3a62e9f2baf58d71a21429fe891c42be995c08ff6bea
SHA512

a44372cf07367c54c7c8e9bade4b64d810dc30054242dc3cde83e2b00358b6b1ba68305903c068214cca1dda2403f350776bae724fb6f765f5eedaa654bcef2b
SSDEEP

384:OvK5f5+1ZEW4SH0f/7MWe9aJZ7cR7CXEDLX4tGWi5YrTHdC:lkZzHHe/wWe9aJWRqEn4tG2THg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ce142811cb420d40a909b6a5d8470b2_JaffaCakes118

Files

8ce142811cb420d40a909b6a5d8470b2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cacda925f66349560d4c7907be0ef177

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
LoadLibraryA

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

polmxhat

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

songs
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ