26b556d062d08bf6109c4d8109f8bcf4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26b556d062d08bf6109c4d8109f8bcf4_JaffaCakes118
Size

6KB
MD5

26b556d062d08bf6109c4d8109f8bcf4
SHA1

bb7691b35d3a6d21a65a416237acfff287780d0c
SHA256

6ced6d6b9e536ee6c0c31846ca2d252673dd0f06031573c58f9c4ed2794bb1b4
SHA512

72f396e254e50e114ea9cefef25037da6ab0abb70130984c28b8199cedd65bbca5e0414e849acb2cf35469405a74dcea8d20da3752ac10db86b628043378b748
SSDEEP

96:JeYQZyGBbRRp/wxZVE6AIxDEWS/gZFcWwG3:QYQZy4Rp/cTAIOWcS2W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26b556d062d08bf6109c4d8109f8bcf4_JaffaCakes118

Files

26b556d062d08bf6109c4d8109f8bcf4_JaffaCakes118
.dll windows:5 windows x86 arch:x86

0c5f44e0b4d0dcb4dfb1a6d1698f2cd0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

nv4prep.pdb

Imports

msvcrt

strncmp

advapi32

RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA

kernel32

SetUnhandledExceptionFilter
QueryPerformanceCounter
CompareStringA
GetVersionExA
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

Exports

Exports

CompatibilityCheck
DllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ