09ba31d4e2803b58a0d5314be8a75a11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09ba31d4e2803b58a0d5314be8a75a11_JaffaCakes118
Size

90KB
MD5

09ba31d4e2803b58a0d5314be8a75a11
SHA1

c3d2ac301881c83fe69940b2938e3470654e05ba
SHA256

cad185f87173c30d5ced4720c4073158af58d860cee7f31e8a18c7f7bdfc61a1
SHA512

3811bcd6f4a508192f56ba8de98eacf69b323e34701d05a142a5127cd472d60c437b58de788ea62d64ab8b0815be547f885ff28b1028afdf7463949f63f7568c
SSDEEP

1536:ujQ3DPdzsi1sfXj1DXrlz0yzBsNOE647VjK2MJcEv0U47evI0EjsI:uj4DPhCfNrx0mswE647IlcUdQO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09ba31d4e2803b58a0d5314be8a75a11_JaffaCakes118

Files

09ba31d4e2803b58a0d5314be8a75a11_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0479c26ca6b4aaafa533fe4c4c8551c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

Beep
OpenProcess
GetCurrentProcessId
lstrcmpA
MulDiv
LocalFree
Sleep
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
TerminateThread
WaitForSingleObject
CreateThread
CloseHandle
GetLocaleInfoA
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
HeapAlloc
GetProcessHeap
HeapFree
ReadConsoleInputA
HeapValidate

msvcrt

memset

Exports

Exports

eareevp

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ