838ac52267cdf80907d8bcd54539943e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

838ac52267cdf80907d8bcd54539943e_JaffaCakes118
Size

134KB
MD5

838ac52267cdf80907d8bcd54539943e
SHA1

7bb80e6deea969441957fb96f6975bb25111b652
SHA256

686348241b63b38f6b09cab16692a03a3d2c167bb304e4ecb3359bb1a8e75128
SHA512

1d9109e76039623e8c63920485f0707ca3b933be6b9b9e6be25fd47dc69dcffc5cc4ccc0d21805e4c872f0e7152a732a3911ba17863157dbd977d81d4a26258c
SSDEEP

3072:h+yjgDxIRE3bKpafQxXLVOWKJbaFRLbZREgczOsYkzBEAuwEdrok:RgD2O3GpafQXOWK1yRBqROpkzBE9tR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/aeyrc_dll/aeyrc.dll

Files

838ac52267cdf80907d8bcd54539943e_JaffaCakes118
.rar
aeyrc_dll/aeyrc.dll
.dll windows:5 windows x86 arch:x86

8c797522dbef30d479a79c71abaa4f9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter

Exports

Exports

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AEyrC0
Size: 1024B - Virtual size: 938B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

AEyrC1
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
使用说明.url
软件E线下载.url