a42a650e065ce5275d82b2e6a20cfd3d_JaffaCakes118 | Triage

Sharing

General

Target

a42a650e065ce5275d82b2e6a20cfd3d_JaffaCakes118
Size

80KB
MD5

a42a650e065ce5275d82b2e6a20cfd3d
SHA1

4181e80dceed404e20ab54629e89864c5ca95a93
SHA256

5709b4a7a8847e31cec8349ceaa2775270d63bfd7df79d8f1f3475e57e26b51c
SHA512

92a0a62e11a98d380e3e2edfeeb4edce75170b5a1c1d87684d7bc6a1136b72b58d607c0990e6b4ee898bcb9136e46785fd7bae10244e812bdc8176c96a992aa3
SSDEEP

768:dgCZc2LN0yuR6AAoMJZCIuecIhpLLXZN/AHMJnMXu1FjGn7ZaKRK:dVZFL8evpLbTpJnMyjyQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a42a650e065ce5275d82b2e6a20cfd3d_JaffaCakes118

Files

a42a650e065ce5275d82b2e6a20cfd3d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

76ba55ae695bab3dac8d5048e75c9326

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
free
malloc
_initterm

kernel32

GetProcAddress
LoadLibraryA
GetLastError
InterlockedExchange
DisableThreadLibraryCalls
LocalAlloc
FreeLibrary
RaiseException

Exports

Exports

mater42_funciones_capitulo

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ