cfe83f9c896025aa60eaf122d9664352_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfe83f9c896025aa60eaf122d9664352_JaffaCakes118
Size

136KB
MD5

cfe83f9c896025aa60eaf122d9664352
SHA1

1668c3edf8f04c2e3572945f048f3588856885c2
SHA256

cd3d3bd87aef108ca6bbedaad094e2c4b01b2400d4b98ffb009815709a1ff809
SHA512

7bc0f43721688d42a2020d04228d5e6b70b34a557e03a16bcacff9e0a5359e06c6a97341de2f17dc0ff971d9b4ceeda3dbc00b3d855cbf9119d669ee19d273e8
SSDEEP

3072:vAELqBycCB/l8xTkX2uWhJdF7wzWG6Y55TLY:vAELqgMapE6PZ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfe83f9c896025aa60eaf122d9664352_JaffaCakes118

Files

cfe83f9c896025aa60eaf122d9664352_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4466ac119d6f01e436ab6cd452d01268

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
exit

kernel32

TlsSetValue
TlsAlloc
LocalFree
TlsGetValue
LocalAlloc
TlsFree

Exports

Exports

nspIirFree
nspcbCartToPolar
nspcbPolarToCart
nspcsIirInit
nspcsIirInitBq
nspcsbIir
nspsCcsFft
nspsDownSample
nspsFirlInit
nspsFirlInitDlyl
nspsFirlSetDlyl
nspsFirlSetTaps
nspsIirInit
nspsIirInitBq
nspsIirlInit
nspsIirlInitBq
nspsIirlInitDlyl
nspsRealFft
nspsUpSample
nspsbAbs1
nspsbFirl
nspsbIir
nspsbIirl
nspsbLn2
nspsbMpy1
nspsbSqrt1
nspsbThresh1

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ