0cb84ba13936d8dcbc4fdd891932243f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0cb84ba13936d8dcbc4fdd891932243f_JaffaCakes118
Size

61KB
MD5

0cb84ba13936d8dcbc4fdd891932243f
SHA1

756348d07f38f9dea09962a07a8ff6bf671daace
SHA256

a1d8230807e2247c48b5c732ab306ed66c6db923f21d9c50a0508a1cf1e03193
SHA512

3cd5770fbb17b35012ad930fdc53a6358d6da320dcc4dd67ff1cd27f07f05ccb1762c80c9b67b44a9d97b3d87bad60893c2a3434eff80ff232a4da3778430039
SSDEEP

1536:CuWIiKAPnPMspbQ628QA8VdN6r4PEYiqlgGdKDwlGlB6519Wd0es:wIfwnPMspM6DsdNdEYV2wL519m0e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cb84ba13936d8dcbc4fdd891932243f_JaffaCakes118

Files

0cb84ba13936d8dcbc4fdd891932243f_JaffaCakes118
.dll windows:6 windows x86 arch:x86

7b0002cd372d388102678e091c820c8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\PC\Desktop\플레르_프로젝트\Loader\Release\Loader.pdb

Imports

kernel32

VirtualFree
VirtualAlloc
Sleep
VirtualAllocEx
CreateProcessA
LoadLibraryW
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

ntdll

NtClose
NtReadVirtualMemory
NtTerminateProcess

vcruntime140

memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_except_handler4_common
__std_type_info_destroy_list
memcpy

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
_invalid_parameter_noinfo
_seh_filter_dll
_initterm_e
_errno
_initterm
_cexit

api-ms-win-crt-string-l1-1-0

strnlen

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

Exports

Exports

test

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b0002cd372d388102678e091c820c8f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 53KB - Virtual size: 52KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1024B - Virtual size: 540B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 53KB - Virtual size: 52KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1024B - Virtual size: 540B