JaffaCakes118_0845a31c7483a80013a143dad45c595b | Triage

Sharing

General

Target

JaffaCakes118_0845a31c7483a80013a143dad45c595b
Size

124KB
MD5

0845a31c7483a80013a143dad45c595b
SHA1

398e946b819205be953ebcbbfef8477051ff3f3e
SHA256

07fff1d2d0324137a05dc6a2ca9a7eed6e277ba99476cd2795d97f5ed761c627
SHA512

76562cdcb0a87c47ca760dae2842e76a9482c4eb4622a29bbabfb80a2c08dd027de0b5c8b6d9b7fd0a54225f2c3f92a0638168b3657fa3dcae7c4ce5b4fa19e6
SSDEEP

3072:G61Ye3TaEu2CoCcn3zO7A4D8XHvVx5RwCALswS5rKe:bTa12CoCckAe8fr5rB5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0845a31c7483a80013a143dad45c595b

Files

JaffaCakes118_0845a31c7483a80013a143dad45c595b
.dll windows:4 windows x86 arch:x86

346d60e37a38da26b7d234c6530424cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
_adjust_fdiv
malloc
memmove
free

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
SetErrorMode
LoadLibraryA
GetProcAddress

Exports

Exports

JgedCreate
JgedDestroy
JgedDisableComponent
JgedDuplicate
JgedEnableComponent
JgedProcess
JgedSetOption
JgedStart

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE