37bc56139a8ee2f1d19bd15a20dc8b64_JaffaCakes118 | Triage

Sharing

General

Target

37bc56139a8ee2f1d19bd15a20dc8b64_JaffaCakes118
Size

5KB
MD5

37bc56139a8ee2f1d19bd15a20dc8b64
SHA1

666b3c5ce63dd1828f2afbf34f1072a5800b4638
SHA256

c04210f73813367b172e35a2d45d7e934a3b0a552af95a7e1d95139464fb235d
SHA512

a3ca7764d62069face85096583499985344519467256dad799935696f57364af191ef982178623f9e1e6cfcc5f2d3aa00e89fa505a567d70b3530e8b14f0835b
SSDEEP

48:ajfAJz+woHlS9dtyUzrkfNoaZHVBfqIh94SaC:er0xyUzrkfiqb9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37bc56139a8ee2f1d19bd15a20dc8b64_JaffaCakes118

Files

37bc56139a8ee2f1d19bd15a20dc8b64_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1ae71920520ae53db39750fc9bbe412d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
CloseHandle
CreateThread
LoadLibraryA

shell32

StrCmpNIA

msvcrt

strrchr
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

DirectSoundCaptureCreate
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCreate8
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DllCanUnloadNow
DllGetClassObject
GetDeviceID

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.code9
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE