12146083415558b7c019656d76576ab0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12146083415558b7c019656d76576ab0_JaffaCakes118
Size

35KB
MD5

12146083415558b7c019656d76576ab0
SHA1

066564634149fd739069163d3e2545aaeb77a016
SHA256

c9bb5a71a3bdb8fd9d063c7f6a64cad28eddb1ce2e331cb3fa5d0b06c90627c1
SHA512

fab8c243cb93274bb0c77c88c96b8f6412969149d87456edcb26a29ee00bfa32b912328df4ca0cc1cfb3e8315b2b558e751f4fa444586f5c8d85adc73dc9b31e
SSDEEP

768:it3ijxTxrUh69jicPFaCkWilsvJyCbsWw:itYacjjFaf5lsUO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12146083415558b7c019656d76576ab0_JaffaCakes118

Files

12146083415558b7c019656d76576ab0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cacda925f66349560d4c7907be0ef177

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
LoadLibraryA

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

anoohz

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

songs
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ