ad4d91f327d7910d3ec9d12297cdaee0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad4d91f327d7910d3ec9d12297cdaee0_JaffaCakes118
Size

124KB
MD5

ad4d91f327d7910d3ec9d12297cdaee0
SHA1

55fc150b788b67316e45a5c772666b435557d9c1
SHA256

ad8f3a14022743ae6e82b3c5ab1569b0b9c2bf5f6c0d9aa9a2b30d0d68c4efe2
SHA512

da28d1e8a278249b6a1d9929d5bfeed882f36d24b3b21d5b6553e64e8dce99c6ce3a4e87cbc3a0f4e239a4139b624ad71d2b152692cca1d94c634e9bbc2f3825
SSDEEP

3072:161Ye3TaEu2CoCcn3zO7A4D8XHNYQ5sdTtz1Eu93H3bOtCL6:kTa12CoCckAe89vEEwH3beCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad4d91f327d7910d3ec9d12297cdaee0_JaffaCakes118

Files

ad4d91f327d7910d3ec9d12297cdaee0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

346d60e37a38da26b7d234c6530424cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
_adjust_fdiv
malloc
memmove
free

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
SetErrorMode
LoadLibraryA
GetProcAddress

Exports

Exports

JgedCreate
JgedDestroy
JgedDisableComponent
JgedDuplicate
JgedEnableComponent
JgedProcess
JgedSetOption
JgedStart

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE