a462f88da4c279b7f5ed11decec08d96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a462f88da4c279b7f5ed11decec08d96_JaffaCakes118
Size

44KB
MD5

a462f88da4c279b7f5ed11decec08d96
SHA1

f909019108ac5762db3205339a3a323d98b95293
SHA256

f1421a32d7e1842644ba03292eba3f3cdbaae018bdd2b42a7b1eb13e910e3b65
SHA512

f2e76033f3d292cf92c4d5ec0af13bf3343bd5a5d33672bf36995dff143d8e3fcccac7bdddfe212e4fc1ef812efa68f7e49bfa314e401a4771cbb47ec49e44d0
SSDEEP

384:MOZeMC8MjMT138cOT0h1mOrFlqnXfi37mb0sbV3jyIoadYI7uE9Iok7:ReXwT138n0brlCXK3M1jkaqI7o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a462f88da4c279b7f5ed11decec08d96_JaffaCakes118

Files

a462f88da4c279b7f5ed11decec08d96_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4b55dc2f9b43d21b19dba3df89775215

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ord795
ord553
ord307
ord864
ord329
ord476
ord248
ord765
ord346
ord349
ord775
ord770
ord772
ord724
ord774
ord385
ord722
ord443
ord377
ord441
ord214
ord395
ord304
ord305
ord811
ord362
ord364
ord397
ord365
ord477
ord512
ord511
ord419
ord513
ord822
ord522
ord225
ord552
ord509
ord318
ord312
ord406
ord793
ord515
ord657
ord594
ord550
ord551
ord444
ord447
ord525
ord528

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ