ea235920101bc34813028167a72436c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea235920101bc34813028167a72436c1_JaffaCakes118
Size

44KB
MD5

ea235920101bc34813028167a72436c1
SHA1

b1cd78aa731d8a79b5cec1dd725ec2b82219a875
SHA256

f3df5e693980e44d0dfdf122e4230192508c0e25a46c48d7f1402fb3b3f2f5a9
SHA512

7fa75e0874b0a93b043a74757b1b539e7066d0e8ebe63bb72067c860fedfef1078869e1b6bfa6b28c46377f840a18bcbb94099cb9799e15298d4a311229dd0d8
SSDEEP

384:Z0FgQIMTMRn4IoQ1C7vxyR375ojc8Tfh3zy6duoYIluB0SF88dC:Z/8TYn4nDxyR3oZzHuBIlNT84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea235920101bc34813028167a72436c1_JaffaCakes118

Files

ea235920101bc34813028167a72436c1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c8b715723f15759c0310d189ca68880f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ord795
ord419
ord553
ord329
ord476
ord248
ord765
ord346
ord349
ord775
ord770
ord772
ord724
ord774
ord385
ord722
ord443
ord377
ord441
ord214
ord395
ord304
ord305
ord811
ord362
ord364
ord397
ord365
ord477
ord512
ord511
ord307
ord513
ord822
ord522
ord225
ord552
ord509
ord318
ord312
ord406
ord793
ord515
ord657
ord594
ord550
ord551
ord444
ord447
ord525
ord528

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ