JaffaCakes118_698a90e12a104440f3072f6f1ebcf8df | Triage

Sharing

General

Target

JaffaCakes118_698a90e12a104440f3072f6f1ebcf8df
Size

176KB
MD5

698a90e12a104440f3072f6f1ebcf8df
SHA1

919d333626ec81da015cdb4b5d380d96dba40398
SHA256

3cecb529c949b40ecfe7f9b8d7d7ced6fd87f97ab103b21fee250d721d9bb62c
SHA512

d5c38caacb9f1cc578194a5e12b2e013341350ca7350ff39dfa9544b8b178c4d0b9a15591218b81522348ff7ee92238dc4aa656e9242e3570125549b656661af
SSDEEP

3072:l0tZC3LhEEUxcVeeZHvXPV4kA7qcA+2HyobBfFqelS88Z5qhFPe:l0tZKtExxHeBV4kAecAW2HlS/58Pe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_698a90e12a104440f3072f6f1ebcf8df

Files

JaffaCakes118_698a90e12a104440f3072f6f1ebcf8df
.dll windows:4 windows x86 arch:x86

c706b027ff6bf73e17127f8f7178144d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_iob
_ftol
exit
fprintf
sprintf
malloc
free
strncpy
tmpfile
fseek
fwrite
fclose
sscanf
getenv
fopen
_initterm
_adjust_fdiv
fread

kernel32

DisableThreadLibraryCalls

Exports

Exports

CreateBuffer
SaveJPGFile
jpeg_CreateDecompress
jpeg_destroy_decompress
jpeg_finish_decompress
jpeg_read_header
jpeg_read_scanlines
jpeg_start_decompress
jpeg_std_error
jpeg_stdio_src

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE