d5027c79dba098d207a5622203234903_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5027c79dba098d207a5622203234903_JaffaCakes118
Size

4KB
MD5

d5027c79dba098d207a5622203234903
SHA1

7ed268651a536aaa59b1daa427734609db710e56
SHA256

2f4cf1ee1695ee01275ade2ebf92b47635b9049f24a11ac002440dd127dda74a
SHA512

f1dec06b2009ad39b9a8e5acdf61161105387914ee27e5c167497374e22e966344192ea0021b9c121e3850fe00b32d1ba39963e0c86a6eee69724b3072541c3c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5027c79dba098d207a5622203234903_JaffaCakes118

Files

d5027c79dba098d207a5622203234903_JaffaCakes118
.dll windows:4 windows x86 arch:x86

259e6bd18a795dbcbe772e43a0bb61da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
FlushInstructionCache
FreeLibrary
GetCurrentProcess
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
LoadLibraryExA
Sleep
VirtualAlloc
VirtualFree
VirtualProtect

Exports

Exports

MFCreateAudioRendererActivate
MFCreateMediaSession
MFCreateSourceResolver
MFCreateTopology
MFCreateTopologyNode
MFCreateVideoRendererActivate
MFGetService

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ