a80861efad3974d5321905d4b940104c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a80861efad3974d5321905d4b940104c_JaffaCakes118
Size

44KB
MD5

a80861efad3974d5321905d4b940104c
SHA1

6d566174965a762b82748908bc2307fb0b81d658
SHA256

912317a8138bbb249139417d476a59270fba270f9fee6685e358b86d6a0d13fe
SHA512

49796c42dd76a26c0499502d929565a5044ac35f41d790a9b43d129a4ec52437c31697a1413e0b20d347ba397c21fbd3e89b35f633241a5804d479f8b3b43600
SSDEEP

384:agUgzMT17YMsoUKrP9Uv3723DMsrV31JySnmUyuCpN99:hwT17YP49Uv3kD9DxmUyV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a80861efad3974d5321905d4b940104c_JaffaCakes118

Files

a80861efad3974d5321905d4b940104c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cc4cf6ea7a52f94c83ba6df91984ab6d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ord526
ord861
ord860
ord859
ord337
ord489
ord256
ord781
ord354
ord357
ord791
ord786
ord788
ord739
ord790
ord395
ord737
ord453
ord385
ord451
ord215
ord405
ord312
ord313
ord827
ord370
ord372
ord407
ord373
ord490
ord525
ord524
ord811
ord857
ord838
ord535
ord226
ord568
ord522
ord326
ord320
ord416
ord809
ord528
ord429
ord569
ord672
ord608
ord566
ord567
ord454
ord457
ord538
ord541

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ