0f8f15b9f752e4e6a8f1cdb2ea826c54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f8f15b9f752e4e6a8f1cdb2ea826c54_JaffaCakes118
Size

123KB
MD5

0f8f15b9f752e4e6a8f1cdb2ea826c54
SHA1

72b4c33263ed5da810d1031cb65170e30ad20fb7
SHA256

05df611398e0aba3eca16a3452294f9ac34d7511c4659fb9e74476d64c334d43
SHA512

1931082185509aa4fbd7b93d3d8d17945f89a088785e5bd23fbead4f0cc3566b658cd107d9311860759fd87abaf019e4e046ec5708549856997bed67c521f7a1
SSDEEP

3072:BAyhyP4u8zS0DCA4SMfR0MtHkleCoutiGO:q8zS0DCA4SMfR0M6leCoS3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f8f15b9f752e4e6a8f1cdb2ea826c54_JaffaCakes118

Files

0f8f15b9f752e4e6a8f1cdb2ea826c54_JaffaCakes118
.dll .js windows:0 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

WahCloseApcHelper
WahCloseHandleHelper
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahCloseThread
WahCompleteRequest
WahCreateHandleContextTable
WahCreateNotificationHandle
WahCreateSocketHandle
WahDestroyHandleContextTable
WahDisableNonIFSHandleSupport
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
WahInsertHandleContext
WahNotifyAllProcesses
WahOpenApcHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahOpenNotificationHandleHelper
WahQueueUserApc
WahReferenceContextByHandle
WahRemoveHandleContext
WahWaitForNotification

Sections

.3V261i7
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.7ft4wT5
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Wka8TO6
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE