f07cd5bdec25387ba622f856969813b5_JaffaCakes118 | Triage

Sharing

General

Target

f07cd5bdec25387ba622f856969813b5_JaffaCakes118
Size

940KB
MD5

f07cd5bdec25387ba622f856969813b5
SHA1

e71eb6b130ff7ba541822d07ff045fc77c4f8e2a
SHA256

31f275cc5f5c56524995034c4aa44c8294798b4872ecc76e01ac706f91ee4121
SHA512

b9f37799c9b29b6e15c05918fa4f65248e13ef73997fc036f30b082463b6b6b647eec3a1237af484ec9e7d2bb1e3231898ae1b6d3cd7f942ecd48a318cfb4e46
SSDEEP

24576:eKIteQy4VfJl3FTvqiv4j7tE5u+LGPrit:Jz4PNvqgy+5HLGPG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f07cd5bdec25387ba622f856969813b5_JaffaCakes118

Files

f07cd5bdec25387ba622f856969813b5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

frostConnect
frostRecv
frostRecvfrom
frostSend
frostSendto
frostSetUserName
frostWSARecv
frostWSASend

Sections

Size: 84KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.v-lizer
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 768KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE