5597745e9cb5b339cc74dbee13d1fe18_JaffaCakes118 | Triage

Sharing

General

Target

5597745e9cb5b339cc74dbee13d1fe18_JaffaCakes118
Size

5KB
MD5

5597745e9cb5b339cc74dbee13d1fe18
SHA1

e0b5adfbf6f9a474c611a209f8744beffbbc7882
SHA256

623868a210731f844c22ab9cebf973a464838b9a083eabc12f6968262383e50e
SHA512

006d0721eac40d257d0834510e15ddb8789cfe183c79752b4c10fa548eee6cc9adc1c5a1f49d425861045b48758c87dded12f5ce8e6d6ea1519fc78d9f89c13c
SSDEEP

48:ajfAJz+woHlS9dtyUzrkfNoaZHVBfqIh94SaCf:er0xyUzrkfiqb9V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5597745e9cb5b339cc74dbee13d1fe18_JaffaCakes118

Files

5597745e9cb5b339cc74dbee13d1fe18_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1ae71920520ae53db39750fc9bbe412d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
CloseHandle
CreateThread
LoadLibraryA

shell32

StrCmpNIA

msvcrt

strrchr
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

DirectSoundCaptureCreate
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCreate8
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DllCanUnloadNow
DllGetClassObject
GetDeviceID

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.code9
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE