ea277065ba1547bb9411e09622d868b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea277065ba1547bb9411e09622d868b6_JaffaCakes118
Size

57KB
MD5

ea277065ba1547bb9411e09622d868b6
SHA1

3993d27f4725bf6b8bf9854f9ae552f014982e4e
SHA256

d203fd149b4b15d9f8ffc282cbd668037cad7ebfa32b2d2ca0c5d7cc6ce67373
SHA512

02e7aff91fb71c45f5a4fde9097d8d9f5045f55e5edaeb6665ef42d3aafe5d60a03a206c3e8497fb2cc6d6b34e94bb854dc45d57cd200adb4fac2c1e54f7d08d
SSDEEP

1536:CggaQaNo1ZEaH/WPvzESXrVSG2Zvr4F54ZX0VnsU:CSMZuTESV2Zvr4LOEVnsU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea277065ba1547bb9411e09622d868b6_JaffaCakes118

Files

ea277065ba1547bb9411e09622d868b6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

MP3_Cleanup
MP3_Close
MP3_Decode
MP3_Init
MP3_Open

Sections

.text
Size: 51KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE