073b43b83940749b3ca19d93cf907140_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

073b43b83940749b3ca19d93cf907140_JaffaCakes118
Size

7KB
MD5

073b43b83940749b3ca19d93cf907140
SHA1

483a5ba0a5fe084f024d5dc3556cde004a364fac
SHA256

97a53efa7ad41a6a0720668ef4981198070b5fc1021ff0920541de64ad752edc
SHA512

ed8dec351eb5119ee5fd2fdce02c99b96c98d357d8f8fa7c5e8de356c0ef2eae6a514a6d48ab1fc946209bdc6ea72eeeaba63662a46bd38b17ff904067807314
SSDEEP

192:fu6reUO5gbnifAlGtZD8KoXmTatmWtNrRWTGu:G8C58ifAl0ZD8K9UmWXrRWTGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
073b43b83940749b3ca19d93cf907140_JaffaCakes118

Files

073b43b83940749b3ca19d93cf907140_JaffaCakes118
.dll windows:6 windows x86 arch:x86

0b40a15f873f8e470b17ad5b4d1ca913

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

AECache.pdb

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

InterlockedCompareExchange
GetTickCount
QueryPerformanceCounter
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetLastError
BaseFlushAppcompatCache
InterlockedExchange
GetCurrentThreadId

wdscore

WdsSetupLogMessageA
CurrentIP
ConstructPartialMsgVA

Exports

Exports

Sysprep_Clean_AECache

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ