f74bd8aec3f00c549c97c61e57e0a5dd_JaffaCakes118 | Triage

Sharing

General

Target

f74bd8aec3f00c549c97c61e57e0a5dd_JaffaCakes118
Size

192KB
MD5

f74bd8aec3f00c549c97c61e57e0a5dd
SHA1

20a587e202ef94ca5bbad5a5b9227a70b0f85b70
SHA256

fc6f41e774a9f8c8333fe856208c94921e503050d2940e1ce5accbb44ad8b80a
SHA512

ff7e54758a993825ede42f1a001129c088b49f44bfd4f8362ff3717794288c079b0c4713af92a0cb0a8c56a7d006a1714d6d6acd99e51c879ad4cf321f0a0448
SSDEEP

3072:Fh9zru102aidEwKsBIjucV6X6Gk50Ro6hNvJmkXUfpVq18aqe:vFL2aimsjO0y6hFibq18Re

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f74bd8aec3f00c549c97c61e57e0a5dd_JaffaCakes118

Files

f74bd8aec3f00c549c97c61e57e0a5dd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0120ef19831f601d330269fd2e0c43c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord825
ord1182
ord823
ord1253
ord342
ord1168

msvcrt

_adjust_fdiv
free
__CxxFrameHandler
_initterm
malloc

kernel32

GetVersion
GlobalFree
GlobalAlloc

Sections

.text
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE