JaffaCakes118_b3433bff2ef4536a31bd199347aa6920 | Triage

Sharing

General

Target

JaffaCakes118_b3433bff2ef4536a31bd199347aa6920
Size

96KB
MD5

b3433bff2ef4536a31bd199347aa6920
SHA1

bbc39fc6d13bbc2d9e07a3a82044f593a69fcca6
SHA256

228d7e7a07ac4d22fa38efd91b71d3fa99756483a41e1f1c21d55d6ea4aab09d
SHA512

61b2d8d09fbb27c4b7d90d13f51f2aca66529e2386147ecafcc65d524b12142b2d636b3b6a7fa3d72029a1b714e20c3940733a656e6c75f7c525fe13cfc6612b
SSDEEP

1536:9ibToqp78CcGIXSQ140agF24wJvM6R0pH6aNbA+KutqKz3zQ6b:9ibTTp78CcDCe4Wl36R0pH6CYuLD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b3433bff2ef4536a31bd199347aa6920

Files

JaffaCakes118_b3433bff2ef4536a31bd199347aa6920
.dll windows:4 windows x86 arch:x86

89710c7d4d8bf03322e48fa40e2124ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
_adjust_fdiv
_ftol
free
malloc

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
SetErrorMode
LoadLibraryA
GetProcAddress

Exports

Exports

JgaCreateAudioDecode
JgaDecodeAudio
JgaDestroyAudioDecode
JgaQueryAudioDecode

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE